PRIVACY POLICY Privacy Policy The protection of your personal data is very important to Samsung SDI Battery Systems GmbH. We process your data confidentially and exclusively on the basis of the data protection regulations and the present privacy policy. In the following, we inform you about the most important aspects of data processing within our website (www.samsungsdibs) and our offered services on our website. Personal data is all data that can be related to you personally, e.g. name, address, e-mail addresses, user behavior. All data that you have provided to us will, of course, be treated confidentially. As a matter of principle, we do not make your data available to others for use unless you have given your consent or we are obliged to disclose this data, for example due to a court order. We process your data exclusively on the basis of the General Data Protection Regulation (GDPR) and the Austrian Data Protection Act (Datenschutzgesetz, DSG), and the provisions of the Telecommunications Act (Telekommunikationsgesetz 2003, TKG). In the following, we inform you about the type, scope and purpose of data processing. §1 Provider and responsible body within the meaning of the Data Protection Act Responsible body according to Article 4(7) within the meaning of the EU General Data Protection Regulation (EU-GDPR) is: Samsung SDI Battery Systems GmbH Premstaetten, Austria Frikusweg 1, A–8141 Premstaetten, Austria + 43 3135 51 83 014 office.sdibs@samsung.com www.samsungsdibs.at §2 Data Protection Officer: For data protection questions, you can contact us by e-mail at gdpr.sdibs@samsung.com or our postal address with the addition of “Data Protection Officer”. Samsung SDI Battery Systems GmbH Data Protection Officer Frikusweg 1, A–8141 Premstaetten, Austria + 43 3135 51 83 014 gdpr.sdibs@samsung.com §3 Scope With this privacy policy, users receive information about the nature, scope and purpose of the collection and use of their data collected and used by the responsible provider. §4 Gender clause Insofar as the masculine form is used in the contents of this report, it is assumed that this refers to both genders on equal terms. §5 Basic information on data processing and legal basis This privacy policy informs users about the type, scope and purpose of the processing of personal data within our online offer and the associated websites, functions and content (hereinafter jointly referred to as “online offer” or “website”). The privacy policy applies regardless of the domains, systems, platforms and devices (e.g. desktop or mobile) used on which the online offer is executed. The terms used, such as “personal data” or their “processing” refer to the definitions in Art. 4 of the General Data Protection Regulation (GDPR). When you contact us using the contact form, we process personal data (e.g. names and addresses) and content data (content of the inquiry). The term “user” includes all categories of persons affected by data processing. They include our business partners, customers, interested parties and other visitors to our online offer. The terms used, such as “user”, are to be understood as gender-neutral. We process users’ personal data only in compliance with the relevant data protection provisions. This means that the users’ data is only processed if a legal permission exists. I.e., in particular if the data processing is necessary for the provision of our contractual services (e.g. processing of orders) as well as online services, or is required by law, or if the users have given their consent. We would like to point out that the legal basis for the consent is Article 6(1)(a) and Article 7 GDPR; the legal basis for the processing for the fulfillment of our services and implementation of contractual measures is Article 6(1) lit. b. GDPR; the legal basis for processing to fulfill our legal obligations is Article 6(1)(c) GDPR; and the legal basis for processing to protect our legitimate interests is Article 6(1)(f) GDPR. §6 Disclosure of data to third parties and third-party providers Data is only disclosed to third parties within the framework of legal requirements. We only disclose users’ data to third parties if this is necessary, for example, on the basis of Article 6(1)(b) GDPR for contractual purposes or on the basis of legitimate interests pursuant to Article 6(1)(f) GDPR in an economic and effective business operation. Where we use subcontractors to provide our services, we take appropriate legal precautions and corresponding technical and organizational measures to ensure the protection of personal data in accordance with relevant legal requirements. When content, tools, or other means from other providers (hereinafter collectively referred to as “third party providers”) are used within the scope of this privacy policy and their named registered office is located in a third country, it is to be assumed that a data transfer takes place to the third party providers’ countries of domicile. Third countries are countries in which the GDPR is not directly applicable law, i.e. countries outside the EU or the European Economic Area. The transfer of data to third countries takes place either if there is an adequate level of data protection, user consent or otherwise legal permission. §7 Collection of general information With each access to the information about the services and company information offered by Samsung SDI Battery Systems GmbH, we or the web space provider automatically collect information (also referred to as server log files). If you wish to view our website, we collect the following data: (1) information about the browser type and version used, (2) the operating system used by the accessing system, (3) the Internet page from which an accessing system arrives at the website (so-called referrer), (4) the sub-websites which are accessed via an accessing system to the website, (5) the date and time of an access to the website, (6) an Internet protocol address (IP address), (7) the Internet service provider of the accessing system, and (8) other similar data and information that serve to avert danger in the event of attacks on our information technology systems. When using this general data and information, Samsung SDI does not draw any conclusions about your person. Rather, this information is required in order to (1) to deliver the contents of our website correctly, (2) to ensure the permanent functionality of our information technology systems and the technology of our website. Therefore, the anonymously collected data and information will be evaluated statistically, on the one hand, and on the other hand, with the aim of increasing the data protection and data security, in order to ultimately ensure an optimal level of protection for the personal data we process. The anonymous data of the server log files are stored separately from any personal data provided by a data subject. §8 Use of cookies In addition to the data already mentioned, cookies are stored on your computer when you use the website. Cookies are small text files that are stored on your hard drive associated with the browser you are using and through which the entity that sets the cookie (in this case, Samsung SDI) receives certain information. Cookies cannot execute programs or transfer viruses to your computer. They serve to make the Internet offer more user-friendly and effective overall. They contain information about the browser, the IP address, the operating system and the Internet connection. We do not pass this data on to third parties or link it to personal data without their consent. This website uses the following types of cookies, the scope and functionality of which are explained below: Necessary cookies (transient cookies) help make a website usable by enabling basic functions such as page navigation and access to secure areas of the website. The website cannot function properly without these cookies. Necessary cookies are transient cookies, which are deleted automatically, when you close the browser. These include, in particular, session cookies. They store a so-called session-ID, with witch various requests of your browser can be assigned to the common session. This allows your computer to be recognized when you return to our website. The session cookies are deleted when you log out or close the browser. Marketing cookies (persistent cookies) help website owners understand how visitors interact with websites by collecting and reporting information anonymously. Marketing cookies are persistent cookies and are automatically deleted after a specified duration, which may vary depending on the cookie. You can delete the cookies at any time in the security settings of your browser. You can configure your browser settings according to your preferences and, for example, refuse to accept third party cookies or all cookies. To do this, you must change the corresponding settings in the browser. Please use the help function of your browser to find out how to disable cookies. However, we would like to point out that this may impair some of the functions and reduce user comfort. The pages http://www.youronlinechoices.com/uk/your-ad-choices/ (Europe) and http://www.aboutads.info/choices/ (USA) allow you to manage online ad cookies. §9 Google AdWords This website uses the online advertising program “Google AdWords” and, within the framework of Google AdWords, conversion tracking. The conversion tracking cookie is set when a user clicks on an ad placed by Google Adwords. These cookies lose their validity after 30 days and are not used for personal identification. If the user visits certain pages of this website and the cookie has not yet expired, Google and we can see that the user clicked on the ad and was directed to this page. Every Google AdWords customer receives a different cookie. This means that cookies cannot be tracked via the websites of AdWords customers. The information gathered from the conversion cookie is used to generate conversion statistics for AdWords customers who have opted for conversion tracking. Customers will see the total number of users who clicked on their ad and were directed to a page tagged with a conversion tracking tag. However, you will not receive any personally identifiable information. If you do not wish to participate in tracking, you can opt out of this use by deactivating the Google Conversion Tracking cookie via your Internet browser under User Preferences. You can find out more about this via Google’s privacy policy at https://policies.google.com/privacy?gl=de&hl=en §10 Google Analytics This website uses Google Analytics, a web analysis service provided by Google Inc. (“Google”). Google Analytics uses so-called “cookies”, which are text files placed on your computer, to facilitate analysis of your use of the website. The information generated by the cookie on your use of this website is usually transferred to a Google server in the USA and stored there. However, if you activate the IP anonymization on this website, your Google IP address will be previously shortened by Google within Member States of the European Union or in other contracting states of the European Economic Area Agreement. Only in exceptional cases the full IP address is transferred to a Google server in the USA and shortened there. On behalf of the operator of this website, Google will use this information to evaluate your use of the website, to compile reports on website activity and to provide the website operator with further services associated with website and internet use. The IP address transmitted by your browser within the scope of Google Analytics will not be merged with other Google data. You may refuse the use of cookies by selecting the appropriate settings on your browser, however please note that if you do this you may not be able to use the full functionality of this website. In addition, you can prevent Google from collecting the data generated by the cookie and related to your use of the website (including your IP address) and Google from processing this data by downloading a browser add to deactivate Google Analytics and installing it for your browser. You can find the deactivation add-on here: https://tools.google.com/dlpage/gaoptout?hl=en. IP anonymization is activated on this website. For the exceptional cases in which personal data is transferred to the USA, Google has submitted to the EU-US Privacy Shield, https://www.privacyshield.gov/EU-US-Framework. The legal basis for the use of Google Analytics is Article 6 (1) sentence 1 lit. f GDPR.2 Third party provider information: Google Dublin, Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland, fax: +353 (1) 436 1001. Terms of service: https://marketingplatform.google.com/about/analytics/terms/us/, overview of data protection: http://www.google.com/intl/de/analytics/learn/privacy.html, and privacy policy: https://policies.google.com/privacy?hl=en-US. §11 Social Media Plug-ins We currently use the following social media plug-ins: Facebook, Xing and LinkedIn. Here we use the so-called 2-click solution, meaning that when you visit our site, no personal data is initially passed on to the providers of these plug-ins. You can recognize the provider of the plug-in by the label on the box above its initial letter or the logo. We offer you the opportunity to communicate directly with the provider of the plug-in via its button. Only if you click on the selected button and thereby activate it, the plug-in provider is notified about you having accessed the associated website of our online offering. In addition, the general data mentioned at the outset (e.g., browser version) is transmitted when you visit our website. By activating the plug-in, personal data is transferred from you to the respective plug-in provider and stored there (in the USA in the case of US providers). The plug-ins allow you to interact with social networks and other users. We have no influence on the data collected or the data processing procedures, nor is the full extent of the data collection, the purposes of its processing or the storage periods known to us. We also have no information concerning deletion of the data collected by the plug-in provider. The plug-ins allow you to interact with social networks and other users. The data is transferred regardless of whether you have an account with the plug-in provider or are logged in there. If you are logged in with the plug-in provider, your data collected at our website will be directly associated with your existing account with the plug-in provider. If you click the activated button and, for example, hyperlink the page, then the plug-in provider stores this information too in your user account and shares it publicly with your contacts. We recommend that you log out regularly after using a social network, especially, however, before activating the button, as this way you can avoid having your profile associated with the plug-in provider. For more information on the purpose and scope of data collection and its processing by the plug-in provider, please refer to the data protection declarations of these providers given below. They also provide you with further information about your rights in this regard as well as setting options to protect your privacy. Addresses of the respective plug-in providers and URLs with their data protection information: Facebook Inc., 1601 S California Ave, Palo Alto, California 94304, USA; http://www.facebook.com/policy.php ; further information concerning data collection: http://www.facebook.com/help/186325668085084 , http://www.facebook.com/about/privacy/your-info-on-other#applications sowie http://www.facebook.com/about/privacy/your-info#everyoneinfo Facebook has submitted to the EU-US-Privacy-Shield, https://www.privacyshield.gov/EU-US-Framework Xing: New Work SE, Dammtorstraße 30, 20354 Hamburg, Deutschland, https://www.xing.com ; further information concerning data collection: https://privacy.xing.com/de/datenschutzerklaerung LinkedIn Corporation, 2029 Stierlin Court, Mountain View, California 94043, USA; http://www.linkedin.com/legal/privacy-policy . LinkedIn has submitted to the EU-US-Privacy-Shield, https://www.privacyshield.gov/EU-US-Framework §12 Use of CloudFlare (Cookie Consent) On our site, JavaScript code is downloaded by the company Cloudflare. If you have JavaScript activated in your browser and no JavaScript blocker installed, your browser may transmit personal data to Cloudflare. We do not know what data Cloudflare links to the data received or for what purpose Cloudflare uses that data. You can install a JavaScript blocker (e.g. www.noscript.net ) to prevent the execution of JavaScript code from Cloudflare altogether. Further information on data protection at Cloudflare can be found at the following link: https://www.cloudflare.com/security-policy. CloudFlare Inc, Inc 665 3rd St. 200, San Francisco, CA 94107, USA; https://www.cloudflare.com/security-policy. CloudFlare Inc, Inc has submitted to the EU-US-Privacy-Shield, https://www.privacyshield.gov/EU-US-Framework §13 Use of font.com The website licenses web fonts, which are hosted by the online font repository fonts.com operated by Monotype. When you access a page on our website, your browser will load the required web fonts into your browser cache. To do this, your browser establishes a connection with the servers of fonts.com. As required by the license agreement, fonts.com registers the cumulative number of page views per month. The use of these web fonts is in the interest of a uniform and appealing presentation. This represents a legitimate interest within the meaning of Art. 6(1)(f) GDPR. Please find further information on fonts.com at: https://www.fonts.com/info/legal and in the privacy policy of Fonts.com: https://www.fonts.com/info/legal/privacy/ and in the privacy policy of Monotype GmbH: https://www.monotype.com/legal/privacy-policy/ §14 Data economy Entfällt der Zweck der erhobenen Informationen oder endet die Speicherfrist, sperren oder löschen wir die Daten. In accordance with the principles of the data avoidance and data economy, we only store personal data for as long as it is necessary or prescribed by law (statutory storage period). If the purpose of the information collected no longer applies or the storage period ends, we will block or delete the data. §15 Your rights Basically, you have the right for information, correction, deletion, restriction, data portability, revocation and objection regarding your stored data (see European General Data Protection Regulation, Articles 12-23). You can request information about which personal data of which origin are stored about you and for what purpose. You have a right to have your personal data corrected if it proves to be inaccurate. Likewise, you may request the completion of incomplete personal data. Your are entitled to request the deletion of your personal data, provided that the legal basis for processing the data is missing or has ceased to exist. The same applies in the event that the purpose of the data processing has ceased to exist due to the passage of time or for other reasons. Existing retention obligations and interests worthy of protection that conflict with deletion must be observed. Under certain circumstances, you may request the restriction of the processing of personal data. Exceptions include the existence of consent, legal claims, or a public interest. In principle, you have the right to receive your personal data that you have provided to Samsung SDI in a structured, commonly used and machine-readable format, provided that the processing is based on consent or a contract (right to data portability). You have a fundamental right to object to the processing of your data, which must be taken into account if your interest worthy of protection due to a special personal situation outweighs the interest in the processing. This does not apply if a legal provision obliges to carry out the processing. Exceptions: It is the mandatory data storage for business processing or the data is subject to the legal obligation to retain. For these purposes, please contact gdpr.sdibs@samsung.com. In order to be able to take a data block into account at any time, it is necessary to keep the data in a blocking file for control purposes. If there is no legal archiving obligation, you can also request the deletion of the data. Otherwise, we will block the data if you so wish. Furthermore, you have the right to lodge a complaint with the data protection authority against the processing of your personal data if you believe that we are not processing your data lawfully. §16 Provisions of contractual services We process data about the user (e.g., names and addresses as well as contact data of users) and contractual data (e.g., services used, names of contact people, payment information) for the purpose of fulfilling our contractual obligations and providing our services pursuant to Art. 6(1)(b) GDPR. Within the scope of registrations (e.g. webinars) and renewed registration as well as the use of our online services, we store the necessary contact data. The legal basis for storage is our legitimate interest and the legitimate inters of users in protection from misuse and other unauthorized use. Such data will not be disclosed to third parties unless this is necessary for the exercise of our rights or we have a legal obligation to do so pursuant to Art. 6(1)(c) GDPR. §17 Contact When a user contacts us (by using the contact form or by e-mail), the user’s details are processed to allow us to process the enquiry pursuant to Art. 6(1)(b) GDPR. The user’s details can be stored in a customer relationship management system (“CRM system”). We delete the requests if they are no longer necessary. We review the necessity every two years; furthermore, the legal archiving obligations apply. §18 Applications Even if you send an application to Samsung SDI Battery Systems GmbH, this company, as the responsible body, will process your personal data. The provision of this data is necessary for the application process. You are entitled to all rights according to GDPR chapter 3, as described in the further course of this declaration. §19 Legal basis We process the personal data you provide for the purpose of initiating and processing an application procedure in order to fulfill a pre-contractual relationship (Art. 6(1)(b) GDPR, possibly in conjunction with Art. 9(2)(b) GDPR) resulting from your application request. If further data processing takes place beyond the processing for handling the application procedure, their legal basis will be listed separately. If further data processing takes place in addition to the processing for handling the application procedure, their legal bases are listed separately. §20 Application procedure Our application process is primarily handled by e-mail. The application documents submitted in the course of an application usually include the following items: (a) Information about your motivations and reasons for applying (b) Excerpt of your qualifications and education (c) Structured curriculum vitae (d) Evidence or copies of selected certificates and/or diplomas You determine the specific scope of the documents. Samsung SDI Battery Systems GmbH only requests data that is necessary for the application process. If we invite you to a personal interview in the course of an application process, personal data will also be collected in this context. This includes primary information such as personal interests or more detailed information about your professional ideas or qualifications. §21 Disclosure of application data As an applicant, the data you provide in this context will be passed on within the organization to those persons who are involved in the application process. This includes employees of our HR department, subject matter experts and potential supervisors. SDIBS may use processors to evaluate your professional expertise. We will inform you about the specific processors prior to any data transfer so that you can review their specific privacy notices and consent to the processing. §22 Retention and record keeping If you conclude an employment contract with us, we will retain your application data for the duration of the employment relationship and in accordance with the applicable retention periods. If no employment contract is concluded, we will retain your data for a further 6 months (e.g. Section15 Austrian Federal Equal Treatment Act (Gleichbehandlungsgesetz, GlBG)). If you would like to be informed about vacancies in the future (record keeping), you can give us your demonstrable consent for this separately. §23 Supplier portal We process personal data relating to our suppliers for the purpose of contract performance pursuant to Art. 6(1)(b) GDPR and/or on the basis of consent granted pursuant to Art. 6(1)(a) GDPR. This also applies to processing operations that are necessary for the implementation of pre-contractual measures (e.g. in the context of the preparation and negotiation of offers). The legislator has enacted a large number of retention periods, which we observe with the utmost care and seek advice in order to comply with these obligations. As a general rule, we will only store your personal data for as long as this is permitted by the defined purpose or as required by law for reasons of proof. Should we wish to store your data for a longer period of time as described above, we would ask you to release us from this obligation within the framework of voluntary declaration of consent. §24 Technical and organizational security measures We take organizational, contractual and technical security measures in accordance with the state of the art to ensure that the provisions of data protection laws are complied with and thus to protect the data processed by us against accidental or intentional manipulation, loss, destruction or against access by unauthorized persons. §25 No liability for linked partner offers Furthermore, we work with various partners who offer Internet sites and services that are accessible through our sites. These partners usually have their own privacy policies or statements. We also assume no responsibility or liability for these policies and statements that are not related to Samsung SDI Battery Systems GmbH. §26 Changes to our privacy policy We reserve the right to change the privacy policy in order to adapt to changed legal situations. This also applies in the event that the data protection declaration has to be adapted due to new or revised services. The new data protection policy will then apply the next time you visit our website. Users should check the content of the privacy policy on a regular basis. LOCATIONS CAREERS SUPPLIER PORTAL PRODUCTS INSIGHT CONTACT US COOKIE SETTINGS Frikusweg 1, A–8141 Premstaetten + 43 3135 5183014 Imprint Privacy Policy 100%