"We have a '''legitimate interest''' in getting your personal info, because we want to sell it to third parties" https://www.gdpreu.org/the-regulation/key-conc

"We have a '''legitimate interest''' in getting your personal info, because we want to sell it to third parties" https://www.gdpreu.org/the-regulation/key-concepts/legitimate-interest/ https://www.gdpreu.org/the-regulation/key-concepts/legitimat... > Legitimate interests is most appropriate as a lawful basis where companies use personal data in a way that individuals can reasonably expect. If it impacts individuals, it can still apply if the controller company can justify there is a compelling reason for the impact the processing will have. > Companies can rely on legitimate interests for marketing purposes if they can prove that the data usage is proportionate and fair to the user. It must have a minimal impact on the user in privacy terms and be for a reason that people would not be surprised at. Sadly I would reasonably expect Samsung to sell the data and I would not be surprised by it.