I have worked retail in the past and the Point of Sale System would create unique customer ID for each customer. if we didn't look you up in the database or your didn't want to give us your information it didn't matter because all of the sales systems talked. If you used your credit card at my store and then went down the street and bought something at another store with that same credit card the sales system would link the purchases to the same customer ID.
If you have ever gone to an Apple store and they e-mailed your receipt to you then you go to another store and they run your credit card your e-mail address will pop up for them to send your receipt to you again. This also works in reverse you use card A and give them your e-mail address then go in another time and use card B but give the same e-mail address they system will link the 2 credit cards to your account. If you were to combine this with any online store purchases they have all the info that is needed to contact you later.
The disc came from Best Buy. It is illegal for a retailer to use the credit card information to give to a manufacturer. More than likely information was given willingly and associated with the credit card number. This is completely legal because Samsung probably found out how many of the specific model was sold and sent Best Buy the discs paying them to send them to everyone that bought them.