Samsung Cloud Platform

Request Service Seller Inquiry

Overview

Architecture Diagram

Key Features

Product Detail

Pricing Standard

Tech Support

The services described in this Marketplace (“Services of Marketplace”) are sold and provided by their respective vendors (“Vendors”).
With regard to the Services of Marketplace, Samsung SDS is a mail order broker, and not a party to any mail orders as defined under the Act on the Consumer Protection in Electronic Commerce of the Republic of Korea.
Accordingly, Samsung SDS is not responsible for any information related to the Services of Marketplace or transactions between you and the Vendors.

SDS Cloud Platform Essential

Privacy
Terms of Use
Terms of Use
Website Terms of Use
Marketplace Terms of Use
Marketplace Product Terms of Use
Service-Level Agreement
Legal Terms

Junehee Lee, CEO of Samsung SDS Co., Ltd.

Address : 125 Samsung SDS (05510) 35-gil, Olympic-ro, Songpa-gu, Seoul | Phone : [Korea] 1661-3311 > 5 > 2, [Global] +82-70-7010-3000 > 4 | Email : cccs@samsung.com

Mail-order-sales registration number : No. 2014-Seoul Songpa-1144 (Songpa-gu Office)

Samsung SDS (the “Company”) strives to strictly comply with all applicable laws and regulations related to collection of personal information, legitimately processing personal information and managing it safely, including Personal Information Protection Act. In accordance with Article 30 of the Personal Information Protection Act, the Company establishes and discloses this Personal Information Processing Policy (this “Policy”) to provide data subjects with guidance on procedures and standards for processing personal information and to promptly and smoothly handle complaints related thereto.

This Policy includes the following:

This Policy takes effect on February 27, 2025.

1. Purpose(s) of Processing Personal Information

The Company processes personal information for the following purposes. The processed personal information will not be used for any purpose other than the following purposes, and if the purpose for using the personal information is changed, necessary measures such as obtaining separate consent will be taken in accordance with Article 18 of Personal Information Protection Act. - Responding to user inquiries and verifying user identity in regard to the services - Responding to customer inquiries to the Marketplace Seller Inquiry and verifying user identity - Sending e-mail for estimated rate from Pricing Calculator and loading related data - Marketing use and sending events and advertising information (with data subject’s consent) - Providing resource materials

2. Personal Information Processed

The Company collects and processes personal information to the minimum extent necessary for the service provision.

1) Personal Information Processed without Obtaining Data Subject’s Consent

There is no personal information processed without obtaining data subject’s consent.

2) Personal Information Processed with Consent from Data Subject

The Company processes the following personal information with data subject’s consent in accordance with Article 15 Paragraph 1 subsection 1 and Article 22 Paragraph 1 subsection 7 of Personal Information Protection Act.

(1) Responding to user inquiries and verifying user identity in regard to the services: - Personal information collected and processed : Name, email address, contact information, position, occupation, employer company name and size
(2) Responding to customer inquiries received from the Marketplace Seller Inquiry and verifying user identity: - Personal information collected and processed : Name, email address, contact information, employer company name
(3) Sending e-mail for estimated rate from pricing calculator and loading data: - Personal information collected and processed : email address
(4) Marketing use and sending events and advertising information: - Personal information collected and processed : email address, contact information
(5) Providing resource materials: - Personal information collected and processed : Name, email address, contact information, position, occupation, employer company name and size

3) The following information may be automatically generated and collected during use of the services:

- Service usage records: Access logs, access IPs, and service use history

3. Personal Information Processing and Retention Period

The Company processes and retains collected personal information within the processing and retention period established in accordance with applicable laws and regulations or within the processing and retention period agreed when data subject’s personal information is collected. The processing and retention period for each type of personal information is as follows. 1) Responding to user inquiries and verifying user identity in regard to the service: 1 year after consent - For inquires related to sales made through the Contact Us : 2 years after obtaining data subject’s consent to use the personal information for sales purpose. - For inquiries made through the Contact Center, i) For Samsung employees using Knox Porta l: 1 year from the time of completion of the inquiry response ii) For other customers: 30 days from the time of completion of the inquiry response. 2) Responding to customer inquiries received the Marketplace Seller Inquiry and verifying user identity : 1 year after consent 3) Sending e-mail for estimated rate from pricing calculator and loading data : 2 weeks after consent 4) Marketing use and sending events and advertising information : 1 year after consent 5) Providing resource materials : 2 years after consent For the following cases however, the personal information processing and retention period will terminate at the end of the relevant reason - If an investigation or inspection is underway due to a violation of related laws, the personal information processing and retention period will terminate upon completion of the relevant investigation or inspection

4. Processing Information of Minor(s) under the Age of 16

The Company does not provide services to minor(s) under the age of 16.

5. Sharing Personal Information

1) The Company processes personal information of data subject within the scope specified for the purpose of processing the personal information, provides the personal information to a third party only pursuant to Articles 17 and 18 of the Personal Information Protection Act, and does not share the personal information with a third party. 2) For smooth service provision, the Company obtains data subject’s consent pursuant to Article 17-1(1) of the Personal Information Protection Act in the following cases and share it only to the minimum extent necessary.

Marketplace Seller Inquiry

- Recipient of personal information: Service Portal Marketplace Registered Seller (Sellers List) ※ Service Portal Marketplace user’s personal information is provided to, among the abovementioned sellers, the solution sellers to whom the user have made inquiries through the Seller Inquiry. - Recipient's purpose of using personal information: Responding to user inquiries received through the Marketplace Seller Inquiry. - Personal Information Provided: Name, email address, contact information, employer company name - Personal Information Retention and Use Period: Collected personal information is destroyed 1 year after consent for the collected personal information is obtained

3) The Company may provide personal information to related organizations without the consent of data subject in the event of an emergency, such as a disaster, infectious disease, an event or accident that poses an imminent danger to life or body, or an imminent loss of property. 4) The Company may provide personal information to third parties outside of Korea as specified in Section 7 Cross-border Transfer of Personal Information.

6. Personal Information Processing by Third Party

The Company outsources processing of personal information to ensure the smooth handling of personal information. Please refer to below for more information.

1) Outsourcing of Personal Information Processing (Customer Management)

- Processing Company: Oracle Corporation - Outsourced Tasks : Management of related personal information processing for the purpose of providing resource materials downloading and viewing services, sales inquiries regarding the Service Portal, identity verification, and preparation, proceeding with, post-event review and management of event for customer’s needs ※ The above personal information includes not only the information that was originally collected, but also information that has been changed through information correction. - Processing Company: Ogilvy Group - Outsourced Tasks: Organization of Eloqua Marketing Solutions database and execution of eDM transmission tasks

2) Personal Information Processing (System operation and maintenance)

- Processing Company : Hyosung ITX - Outsourced Tasks : Operation of the customer service center for the Service Portal and customer services - Processing Company : Goodus - Outsourced Tasks : Inquiring personal information and conducting operation related to receiving/classifying/assigning/processing the customer inquiries on the Service Portal - Processing Company : RebirthIT - Outsourced Tasks : Inquiring personal information related to receiving/classifying/assigning/processing the customer inquiries on the Service Portal and conducting related operation. - Processing Company : Imperva, Inc. - Outsourced Tasks : Detect security threats, user traffic analysis and saving the log

Samsung SDS ensures that the personal information processing outsourcing contract stipulates the processing contractor’s responsibilities and obligations such as prohibition of processing personal information for purposes other than performance of processing work, technical and administrative protection measures, restrictions on re-delegation, management and supervision of the processing contractor, and compensation for damages in accordance with Article 26 of the Personal Information Protection Act and that the processing contractor safely processes the personal information. In accordance with Article 26-6 of the Personal Information Protection Act, the processing contractor may not re-delegate Samsung SDS’ personal information processing business, and the processing contractor must obtain Samsung SDS consent prior to such re-delegation. If the scope of the processing work or the processing contractor is changed, it will be disclosed through this Privacy Policy without delay. The Company may provide personal information to third parties outside of Korea as specified in Section 7 Cross-border Transfer of Personal Information.

7. Cross-border Transfer of Personal Information

The Company may transfer personal information of data subjects abroad as follows:

1) Outsourcing of Personal Information (Overseas Transfer)

- Legal basis for overseas transfer: Personal Information Protection Act Article 28-8(1)(3)(a) (Overseas outsourcing and storage for contract execution)

(1) Oracle Corporation Data Center

- Personal information transfer country and the date and method of transfer ∙ Transfer country : Australia ∙ Date of transfer : When using Internet-related services provided by the Service Portal ∙ Method of transfer : Transfer through the network - Processing Company : Oracle Corporation Data Center - Contact information : Chief Privacy Officer, Oracle Corporation (https://www.oracle.com/legal/privacy/services-privacy-policy.html) - Outsourced Tasks : ∙ Provide feedback and manage sales inquiries on the Service Portal ∙ Event and other service offerings and email marketing activities ∙ Identify verification and preparation, proceeding with, conducting post-event review and management of event for customer needs - Personal Information Processed : Name, email address, contact information, position, occupation, employer company name and size - Retention and Personal Information Processing Period: Personal information collected will be retained for 2 years after consent

2) Sharing Personal Information with Third Party (Overseas Transfer)

- Personal information transfer country and the date and method of transfer ∙ Transfer Country : Countries of the following cities where Imperva's global security infrastructure hub is located ※ APAC (Auckland, Bangkok, Dubai, Hong Kong, Johannesburg, Moscow, Mumbai, New Delhi, Osaka, Singapore, Taipei, Tel Aviv, Tokyo) ∙ Date of Transfer : When traffic is processed through Imperva WAF, when an aggressive phrase is identified in the user's web request information ∙ Method of Transfer : Save event logs for traffic. If personal information is included when saving the log, masking is processed in an unrecoverable way. - Processing Company : Imperva, Inc. - Contact information : privacy@imperva.com - Outsourced Tasks : Detect security threats, user traffic analysis and saving the log - Personal Information Processed ∙ Name, email address, contact information, position, occupation, employer company name and size ∙ User traffic data classified as harmful traffic - Retention and Personal Information Processing Period : Pursuant to the service operation standards, the personal information transferred is retained for up to 90 days from the time it was saved

How to refuse the transfer of personal information and procedures and effects of the refusal: As the Company outsources processing of customer management tasks to overseas contractors, if a customer refuses to have his/her personal information transferred overseas, such customer will not be able to use the service. In such case, the customer may request deletion of his/her personal information through the customer service department (☎ +82-2-6155-8640).

8. Destruction of Personal Information

Samsung SDS destroys personal information without delay when it is no longer necessary to retain the personal information, such as after the expiration of personal information retention period or the achievement of the purpose of processing. If personal information must be retained in accordance with other laws even though the retention period of personal information agreed by the data subject has elapsed or the purpose of processing has been achieved, the relevant personal information is transferred to a separate database (DB) or stored in a different storage location. ※ The types of the personal information and grounds for its preservation according to other laws may be checked in Section 3 Personal Information Processing and Retention Period. The procedure and methods for destroying personal information are as follows:

1) Destruction procedure

The Company selects the personal information for which the reason for destruction has occurred and destroys the personal information with the approval of the person in charge of the Service Portal.

2) Destruction method

The Company destroys personal information recorded and stored in electronic file format so that the records cannot be reproduced. Paper documents containing personal information are destroyed by shredding or incineration.

9. Ensuring Security of Personal Information

The Company is taking following measures to ensure the safety of personal information. 1) Administrative Measures: Establishment and implementation of internal management plans, operation of a dedicated organization, regular employee training 2) Technical Measures: Management of access rights to personal information processing systems, installation of access control systems, encryption of personal information, security programs installation and updates 3) Physical Measures: Access control of computer rooms, data storage rooms, etc. In addition to taking the legally required measures, the Company has acquired local and international personal information protection certifications such as ISO/IEC 27701 and ISMS-P to ensure the safety of data subject’s personal information.

10. Cookies

The Company uses “cookies” to store and retrieve usage information from time to time to provide individualized services and convenience to users. Cookies are small amounts of information sent to data subject's browser by the server (http) used to operate the website and are stored on the information subject's PC or mobile. Data subject can set settings such as accepting or blocking cookies through the web browser options settings. However, if you refuse to save cookies, you may experience difficulties in using customized services.

< How to accept/block cookies >

Allow/block cookies in your web browser: - Chrome : Web browser settings > Privacy and security > Delete browsing data; - Edge : Web browser settings > Cookies and site permissions > Manage and delete cookies and site data
Allow/block cookies on mobile browsers: - Chrome : Web browser settings > Privacy and security > Delete browsing data; - Safari : Mobile Device Settings > Safari > Advanced > Block All Cookies; - Samsung Internet : Mobile browser settings > Browsing data > Clear browsing data
The following are cookies used by the Company and will be activated only when users are on the website.

Category	Name	Purpose
User ID	User ID (Auto-generated)	Distinguish new/revisiting users
User activity	Visiting webpage address	Used as webpage activity statistical analysis for service improvements
	Visiting webpage title
	Referrer
	Click area
	Time of click
Connection environment	Region	Used as connection environment analysis for service improvements
	OS
	Browser version
	Screen resolution
	IP address (some de-identification)

11. Exercising Rights of Data Subject and its Legal Representative

The Company would like to make sure you are fully aware of all of your data protection rights. Every user is entitled to the following:

1) The right to access

- You have the right to request the Company for copies of your personal data by contacting us via the Data Protection Officer specified below.

2) The right to rectification

- You have the right to request that the Company correct any information you believe is inaccurate. You also have the right to request the Company to complete information you believe is incomplete. - Viewing and correcting personal information may be requested by contacting us via the Data Protection Officer specified below.

3) The right to erasure

- You have the right to request that the Company erase your personal data, under certain conditions. - The deletion may be requested by contacting us via the Data Protection Officer below. - Withdrawal of consent to collect and use personal information may be requested by contacting us via the Data Protection Officer specified below.

4) The right to restrict processing

- You have the right to request that the Company restrict the processing of your personal data, under certain conditions.

5) The right to object to processing

- You have the right to object to the Company’s processing of your personal data, under certain conditions.

6) The right to data portability

- You have the right to request that the Company transfer the collected data to another organization or directly to you, under certain conditions. - Personal information that is cancelled, restricted or deleted, at the request of the user or their legal representative, will be handled in accordance with the terms and conditions mentioned herein.

This information will not be accessed or used for any other purpose. Data subjects may exercise their rights by contacting the following departments. The Company will endeavor to promptly process data subject’s rights to exercise their rights.

▶ Personal Information Reception and Processing Department

- Department name: SCP Platform Development Group - Addresses: Samsung SDS 125, Olympic-ro 35-gil, Songpa-gu, Seoul, Korea 05510 - Contact information: +82-2-6440-6984, scp.privacy@samsung.com

12. Chief Privacy Officer and Customer Service

The Company is responsible for overall management of personal information processing and designates a Data Protection Officer and Customer Service Department as shown below to process complaints and remedy damages related to personal information processing.

1) Data Protection Officer

- Data Protection Officer: Legal service team leader - Contact Information: +82-2-6155-1118, privacy.sds@samsung.com * Connects to Customer Service Department

2) Customer Service Department

- Department: SCP Platform Development Group - Contact Information : +82-2-6440-6984, scp.privacy@samsung.com

Data subject may contact the Data Protection Officer and Customer Service Department regarding all inquiries related to personal information protection, complaints, and damage relief arising from the use of the Portal Service. The Company will promptly respond and process your inquiries.

13. Remedies for Data Subject’s Rights Infringement

If you are not satisfied with the Company’s handling of your complaints, results of damage relief or if you wish to make additional report or need consultation on personal information infringement, please contact the following organizations. - Personal Information Dispute Mediation Committee : +82-1833-6972 (www.kopico.go.kr) - Personal Information Infringement Report Center: +82-118 (privacy.kisa.or.kr) - Prosecution Service: +82-1301 (www.spo.go.kr) - Korean National Police Agency: +82-182 (ecrm.cyber.go.kr)

[For European Economic Area (EEA) Residents Only]

- Privacy Infringement Report Center : +82-118 (www.kisa.or.kr) - Privacy Mark Certification Committee : +82-2-580-0533~4 (www.eprivacy.or.kr) - EU Data Protection Officer : +32 2 299 11 11 (data-protection-officer@ec.europa.eu) Contact details for all EU Supervisory Authorities can be found here.

14. Changes in Personal Information Processing Policy

1) This Privacy Policy takes effect from 2025. 2. 27. 2) The previous version of the Personal Information Processing Policy can be found in the Privacy Policy History above.

Privacy policy version: v.4.1 Privacy policy effective date: February 27, 2025 Last change date of privacy policy: February 27, 2025

Copied to Clipboard.