Samsung SDS India Privacy Policy

We, Samsung Data Systems India Private Limited are committed to protecting your personal information and complying with the Digital Personal Data Protection Act, 2013 and other applicable laws and regulations (“Data Privacy Laws”). This Privacy Policy outlines our practices with regard to the collection, processing, and use of your personal information in connection with https://www.samsungsds.com/in/index.html (“Website”) and the provision of various product and/or services offered through Website) (collectively, “SDS Services”)].

This Privacy Policy covers the following topics:

  • ▶ Personal Information Collected;
  • ▶ Purpose of Personal Information Processing;
  • ▶ Sharing of Personal Information;
  • ▶ Retention Period;
  • ▶ Destruction of Personal Information;
  • ▶ Cross-border Transfer of Personal Information;
  • ▶ Exercise of Your Rights;
  • ▶ Personal Information of Minors;
  • ▶ Ensuring Security of Personal Information;
  • ▶ Cookies;
  • ▶ Third-Party Contents;
  • ▶ Chief Privacy Officer and Contact Information; and
  • ▶ Changes.

1. Personal Information Collected

1.1 Categories of Personal Information Collected

We collect and divrocess the following information in connection with divrovision of the SDS Services.

  • 1.1.1 Information you provide to us: We collect and process your personal information you provide to us which may include [Name, email address, contact number, job title, company, industry sector, and company size], which you may provide in the message board available on our Website.
  • 1.1.2 Information automatically collected: Certain types of information may be generated during your use of the SDS Services which may include:
    • (1) Service usage record: access log, access IP information, service use record;
    • (2) PC information: OS version, browser version;
    • (3) If you use a mobile device: Device identification number, device OS information
  • 1.1.3 Information from third-party sources: There are no personal information provided from third-party sources in connection with SDS Services.

1.2 Your Options

You may refuse to provide us with certain types of personal information. In some cases, your refusal to provide such information may limit or restrict your access to and use of certain parts of the SDS Services. Such limitations or restrictions will be further explained upon provision of specific SDS Services.

2. Purpose of Personal Information Processing

We use your personal information for the following purposes (“Purposes”):

  • to provide a Service or feature your request
  • to provide customized content and personalized services based on your past activities on our Services
  • to analyze our products and services to help us better understand our customers in order to offer the most relevant communications, services, and experiences to you
  • to ask you for your opinions on our products and services and to carry out customer surveys, with your separate consent if required
  • to provide software updates, maintenance services, and support for your devices
  • to comply with the law and legal processes
  • to protect the rights, property, or safety of Samsung SDS India Pvt. Ltd., or any of our affiliates, business partners, or customers

3. Sharing of Personal Information

We do not share your personal information with third parties except as provided in this Privacy Policy or required by applicable laws and regulations.

3.1 Sharing of Personal Information with Third Parties for the Purposes

We share your personal information with the following entities only for the Purposes.

3.1.1 Business Partners
We may contract other business partners, including but not limited to, providers, vendors or contractors (collectively, the “Business Partners”) to carry out certain tasks (“Functions”) on behalf of us and in accordance with our instructions. The Business Partners are granted access to your personal information necessary to perform their assigned Functions as shown below.

Business Partners
Business Partners Functions Duration of Processing and Retention
Oracle Corporation Processing personal information for the purposes of providing resource materials downloading and viewing services, responding to general inquiries on Samsung SDS, preparing, hosting, reviewing, and managing events matching customers’ needs and to check identification for event participation Until the end of the entrustment contract or until membership withdrawal
Diamond Ogilvy Group Refining Eloqua marketing solution DB and sending out eDM Until the end of the entrustment contract or until membership withdrawal

Any changes to the scope of the Functions or the Business Partner information will be reflected in updates of this Privacy Policy, which will be made available to you in a timely manner.

3.2 Disclosure of Personal Information as Required by Law

We may disclose your personal information in response to a legal request, such as a court order, subpoena, or request from a law enforcement agency, regulatory body, or other authorized authority. To the extent possible and permitted by law, we will use commercially reasonable efforts to notify you of such disclosure.

3.3. Disclosure of Personal Information in the Event of a Corporate Transaction

In the event that we undergo transactions that involve transfer of a part or all of our businesses (and assets), such as a merger, acquisition, or sale, your personal information may be transferred to the relevant parties involved in such transactions. Unless you have given us your consent to do otherwise, your personal information that has been collected or processed by us or our Business Partners will continue to be subject to the terms and conditions of this Privacy Policy, and we will require the acquiring party to comply with the same level of protection for your personal information as outlined in this Privacy Policy.

4. Retention Period

We will retain your personal information for the period which you have consented at the time of collection, or as otherwise required by applicable laws and regulations.

Retention periods for each type of personal information are as follows:

∙ Identification, first and last name, mobile phone number you provided to us: for the duration of SDS Service Provision;
∙ Connection or IP information automatically collected: 1 year from the date of collection; and
∙ Name, email address, phone number obtained from third-party sources: 3 year from the date of collection.


Please note, however, that we may be required to retain your personal information for a longer period than the retention period described above if we are legally obligated to do so. In such cases, we will continue to retain your personal information for the duration mandated by applicable laws and regulations. Furthermore, if there remains any pending payments related to the use of the SDS Services, we will retain your personal information until such payments have been fully settled.

5. Destruction of Personal Information

Upon expiration of the personal information retention period as specified in Section 4 of this Privacy Policy, we will destroy your personal information in a secure and permanent manner. This includes permanently deleting electronic data and shredding or incinerating physical documents.

6. Cross-border Transfer of Personal Information

Your personal information may be processed in and transferred to countries other than your country of residence, including those listed below, where our affiliates and business partners are located.

6.1 Samsung SDS overseas subsidiaries

  • Recipients: Samsung SDS Korea (SDSK), and other Samsung SDS overseas branches and group companies, including SDSA, SDSC, SDSE, SDSLA, SDSVN, and SDSAP.
  • Purpose of Providing: To support smooth business operations and effective communication among executives and employees of Samsung SDS domestic and overseas offices who use Internet-related services provided on the Samsung SDS official website (www.samsungsds.com).
  • Types of Personal Information Provided: Name, email address, contact number, job title, company, industry sector, and company size.
  • Retention Period: Your personal information will be retained until withdrawal of your consent, unless a longer retention period is required or permitted by applicable law.

6.2 Oracle Corporation Data Center (Australia)

  • Recipients: Oracle Corporation Data Center (Australia)
  • Purpose of Providing: Processing personal information for the purposes of providing resource materials downloading and viewing services, responding to general inquiries on Samsung SDS, preparing, hosting, reviewing, and managing events matching customers’ needs and to check identification for event participation
  • Types of Personal Information Provided: Name, email address, contact number, job title, company, industry sector, and company size.
  • Retention Period: Your personal information will be retained until withdrawal of your consent, unless a longer retention period is required or permitted by applicable law.

6.3 Diamond Ogilvy Group (Republic of Korea)

  • Recipients: Diamond Ogilvy Group (Republic of Korea)
  • Purpose of Providing: Refining Eloqua marketing solution DB and sending out eDM
  • Types of Personal Information Provided: Name, email address, contact number, job title, company, industry sector, and company size.
  • Retention Period: Your personal information will be retained until withdrawal of your consent, unless a longer retention period is required or permitted by applicable law

We will take reasonable steps to ensure that such processing and transfer are carried out in accordance with this Privacy Policy and in compliance with applicable Data Privacy Laws. This includes using appropriate safeguards to protect your personal information.

If your personal information is accessed and processed in a jurisdiction other than where you reside, it may be subject to the laws of that jurisdiction, including those that permit or require disclosure of your personal information to government agencies, courts, or law enforcement authorities.

You have the right to refuse the cross-border transfer of your personal information to certain countries. However, please note that your refusal may limit your ability to use the SDS Services, as some systems related to the SDS Services are operated and maintained by our Business Partners located in those countries.

7. Exercise of Data Subject’s Rights

We are committed to ensuring that you are aware of and can exercise your rights regarding your personal information. Subject to the circumstances, conditions and exceptions set out in applicable Data Privacy Laws, you are entitled to exercise your rights shown below by contacting us via the contact information specified in Section 12 of this Privacy Policy.

7.1 Right to Access

You have the right to know whether we process your personal information, and if we do, to request access to that information. You can also request a copy of your personal information that we hold.

7.2 Right to Rectification/Correction

You have the right to request rectification or correction of any inaccurate information if you have reason to believe we have inaccurate information about you.

7.3 Right to Erasure

You have the right to request the deletion of your personal information. We will promptly delete such personal information upon your request, unless otherwise required by applicable laws and regulations.

7.4 Right to Withdraw Consent

You have the right to withdraw your consent to the collection and use of your personal information in our possession or under our control at any time. We will process your request within a reasonable timeframe, and thereafter, subject to the terms and conditions of this Privacy Policy, we will refrain from collecting, using and/or disclosing your personal information.

7.5 Right to Nominate

You have the right to nominate a representative who will act on your behalf to exercise your rights in case of incapacity, death, etc.

7.6 Right of Grievance Redressal

You may exercise the above rights by using the Data Principal Request Form. The form requires information for identifying you, details about the right you are choosing to exercise and scope of the right. It also needs you to exercise a declaration with respect to the information being filled by you in the form is true and accurate.

If you have any further questions about the process to exercise these rights or any grievance with respect to how we are handling your personal data, you may contact us at cpo.sdsi@samsung.com

8. Personal Information of Minors

We are committed to protecting the privacy of minors. We do not knowingly collect, use, or disclose personal information from minors under the age of 18 without the explicit consent of a parent or guardian. If we become aware that we have inadvertently collected personal information from a minor without consent, we will take steps to delete it as soon as possible.

9. Ensuring Security of Personal Information

We are committed to protecting the security and integrity of your personal information. To achieve this, we implement administrative, technical, and physical measures designed to ensure the confidentiality, integrity, and availability of your personal information.

9.1. Administrative Measures:

We have implemented internal policies and procedures to manage personal information in a safe and secure manner. These measures include:

∙ Regular employee training on data protection and security best practices;
∙ Incident response protocols to promptly respond to and contain security incidents; and
∙ Access control procedures to ensure that only authorized personnel have access to personal information.

9.2. Technical Measures

To protect your personal information from cyber threats, we implement the following technical measures:

∙ Access control: We manage and restrict access to our personal information processing systems to authorized personnel only, using secure authentication and authorization protocols;
∙ Security software: We install, operate, and regularly update and inspect security programs to prevent unauthorized disclosure, loss, destruction, or alteration of personal information from cyber threats, including hacking, malware, and computer viruses;
∙ Network monitoring: We conduct regular network traffic monitoring to detect and respond to potential security incidents; and
∙ Intrusion detection and prevention: We implement measures to detect and prevent any unauthorized attempts to access or alter personal information, including illegal alterations or other malicious activities.

9.3. Physical Measures

To protect the physical security of personal information, we implement the following physical measures:

∙ Access control: We restrict access to our computer rooms, data storage rooms, and other facilities to authorized personnel only, using secure access controls such as biometric authentication or keycard access;
∙Database access management: We monitor and control access to our database systems where personal information is stored, handled, and processed. This includes granting, changing, and removing access permissions to ensure that only authorized personnel can access personal information; and
∙ Intrusion prevention: We employ an intrusion prevention system to detect and prevent unauthorized physical access to our facilities and database systems.

10. Cookies

Cookies are small informational text files which are downloaded to your computer or other devices through your web browser when you visit a website and enable the website to recognize the accessing device (the “Cookies”). From time to time without further notice, we may use Cookies to improve SDS Services.

The types of cookies that we use are as follow:

types of cookies that we use are
Classification Name Purpose
Auto ID save upon visit Customer Guide Identify the visitor without log-in
Activity response Total conversation To serve better interactions, these cookies track web behaviors of email subscribers and web for submitters.
Total pages
Total time
Total visits
Most recent search query
Most recent search engine
Most recent referrer
Most recent marketing campaign
Most recent form submitted
Last visit date and time
Last page in visit
First visit date and time
First page in visit
IP address based information City To serve better interactions, this cookie assumes regions and companies of email subscribers and web for submitters.
Company
Country DNS name
Country (from DNS)
Country (from IP)
Latitude
Longitude
State/Province
Time zone
Time zone offset from GMT
Zip code

You may choose to: i) allow all Cookies; ii) verify each time any Cookies are saved; or iii) refuse to save any Cookies at all. Please note that your refusal to save any Cookies may restrict your use of certain features/parts of the SDS Services.

< How to allow/block cookies >

▶ Allow/block cookies in your web browser

- Chrome: Go to Settings > Privacy and security > Delete browsing data
- Edge: Go to Settings > Cookies and site permissions > Manage and delete cookies and site data

▶ Allow/block cookies in your mobile browsers

- Chrome: Go to Settings > Privacy and security > Clear browsing data on mobile browser
- Safari: Go to Settings > Safari > Advanced > Block all cookies on a mobile device
- Samsung Internet: Go to Settings > Delete browsing data > Clear all browsing data

※ Menu and method may be slightly different depending on OS version.

11. Third-Party Content

The SDS Services may include contents from third parties or references to certain products or services offered by third parties. These third parties may collect your personal information, through cookies or other tracking technologies. Please note that we are not responsible for the privacy practices of these third parties, and we encourage you to review their privacy policies before providing them with any personal information. By using the SDS Services, you acknowledge that you are responsible for reviewing and understanding the privacy policies of any third-party you interact with through the SDS Services.

12. Chief Grievance Officer and Contact Information

We have appointed a Chief Grievance Officer who is responsible for overseeing the processing of personal information and addressing any concerns or requests you may have.

If you have any questions or wish to make a request regarding our privacy practices or the processing of your personal information, please don’t hesitate to contact us using the information below.

∙ Chief Grievancel Officer: Mr. Sunil Kumar Gupta

- E-mail: cpo.sdsi@samsung.com

13. Changes

We may update this Privacy Policy from time to time to reflect changes in our business, technology, or legal requirements. We encourage you to review this Privacy Policy regularly to stay informed about our privacy practices and any changes we may make.

This Privacy Policy was last updated on 24 September 2025. You can access previous versions by clicking the drop-down box located at the top right corner of this Privacy Policy.