1. Personal Information We Collect and Method of Collection

Our website may be accessed without registration. However, some of the features and services offered on our website may require Users to provide his or her personal information ("personal information" or "personal data").

Samsung Bioepis may collect the following personal information:

Name, email address, and any other personal information you provide to us through our website

Samsung Bioepis may collect personal information through the following methods:

Website, fax, email, and telephone

2. Purpose of Collection and Use of Personal Information

Samsung Bioepis may use the collected personal information for the following purpose:

Communication with Users

3. Disclosure and Provision of Personal Information

Samsung Bioepis may use the collected personal information only for the purpose set forth in Section 2 (Purpose of Collection and Use of Personal Information) and will not use such information for any other purpose, or disclose the information to a third party without User’s prior consent except where disclosure is:

• required by Applicable Laws, or where disclosure is necessary to comply with agency action, regulatory requirement, judicial proceeding, or court order;
• necessary to detect, prevent and/or resolve fraud, security or technical problems, to the extent permitted under Applicable Laws; and
• necessary to protect the safety, rights, or property of our customers, the public or Samsung Bioepis.

4. Outsourcing of Personal Information Management

Samsung Bioepis does not outsource the management of personal information collected through this website to a third party.

5. Usage and Retention Period

Samsung Bioepis uses and retains collected personal information for the period necessary to fulfill the purpose provided under this Privacy Policy, unless a longer retention period is required or permitted by Applicable Laws or otherwise to fulfill legal obligation.

6. Destruction of Personal Information

The personal information collected is destroyed without delay when the purpose for collecting and using User's personal information is achieved. User’s personal information will be destroyed as follows:

Personal information provided by User will be destroyed immediately upon achieving its purpose, in accordance with Applicable Laws

• Personal information embodied in printed form will be destroyed physically, either by shredding or incinerating; and
• Personal information stored in electronic form will be destroyed by using appropriate software or other technology that renders the personal information data irrecoverable.

7. Rights of Users and User’s Legal Guardians

Users have the following rights under the GDPR:

• To access your personal information;
• To be provided with information about how your personal data is processed;
• To have your personal data corrected;
• To have your personal data erased in certain circumstances;
• To object to or restrict how your personal data is processed;
• To have your personal data transferred to yourself or to another business in certain circumstances; and
• To withdraw consent.

Users have the right to take any complaints about how we process your personal data to the supervisory authority.

Users and User’s legal guardians may request to view, change, correct or delete the User's personal information, or the personal information of Users under the age of 14. For Users under the age of 14, User’s legal guardian may request to view, change, correct or delete the User’s personal information. To make such request, User or User’s legal guardian should contact Samsung Bioepis Data Protection Manager (as described below) in writing, by telephone, or email. The request to view, change or delete personal information will be processed without delay.

Personal information deleted pursuant to the request of User or User's legal guardian will be handled in accordance with Section 5 (Usage and Retention Period) and Section 6 (Destruction of Personal Information), as applicable.

8. Non-Use of Auto-Collection of Personal Information and Automated Decision-making & Profiling

Samsung Bioepis does not use technology or devices that automatically collect Users' personal information and does not process personal data for automatic decision-making or profiling.

9. Protection of Personal Information

Samsung Bioepis has reasonable technical, physical, and organizational security measures in place aimed to protect against the loss, theft, leakage, alterations, unauthorized disclosure or damage of personal information, as follows:

Installation of anti-virus and security software, use of encryption, use of intrusion protection system and firewall to prevent any unauthorized external access, etc.

Establishment and implementation of management plans, minimal number of employees handling personal information, and regular employee training, etc.

10. Contact Details of Data Protection Manager and European Data Protection Officer

Users may submit personal information-related inquiries related to Samsung Bioepis website to Samsung Bioepis Data Protection Manager. Samsung Bioepis will reply as soon as possible.

In case you are a data subject in the European Union, you may ask any question to our European Data Protection Officer and may lodge a complaint with the lead supervisory authority if you consider that our processing of your personal data infringes Applicable Laws. Contact details for the European Data Protection Officer and the lead supervisory authority are as follows.

11. Links to Third Party Websites

Samsung Bioepis website may provide links to third-party websites for your convenience and information. If you access those links, you will leave Samsung Bioepis website.

Samsung Bioepis does not control those sites or their privacy practices. We do not endorse or make any representations regarding third-party websites. Any personal information you choose to provide to, or that is collected by, those third parties, is not covered by this Privacy Policy. We encourage you to review the privacy policy of the company whose website you visit before submitting your personal information.

12. Modification of Privacy Policy

This Privacy Policy is subject to change from time to time. If any content of this Privacy Policy is added, deleted, or revised, such addition, deletion or revision will be posted on the website at least seven (7) days prior to the effective date of such changes.