To facilitate your understanding of the processing activities carried out by the above mentioned subjects as Controllers or Joint Controllers, we have prepared this document explaining which processing activities are carried out autonomously by each company. In this paragraph we explain for what purposes each category of data is processed by each Data Controller or Joint Controller.

The companies collecting and processing personal data as autonomous data controllers (hereinafter the “Data Controllers” or the “Companies”) or as joint controllers are: Pursuant to Chapter III of the GDPR, you have the right to ask each Data Controller or Joint Controller: In any case, for technical reasons, the termination of the processing and the consequent cancellation or irreversible anonymization of the related Personal Data will be definitive within thirty days from the terms indicated above. This is information that is not directly associated with individuals, but which by its very nature could, through processing and association with data held by third parties, allow these users to be identified.

3.2 PURPOSES OF THE JOINT CONTROLLERS (DIESEL AND OTB)

Each Company collects different categories of personal data according to the purpose for which it processes them.

carrying out market research, sending commercial promotions and discounts reserved to customers, commercial information - possibly also Each Data Controller or Joint Data Controller may process your Personal Data to comply with a legal obligation to which it is subject. Legal basis: this processing is based on the legitimate interest of Diesel in the pursuit of improving its performance and its relationship with the clients. 3.2 PURPOSES OF DIESEL S.P.A With particular reference to the judicial protection of our rights or in case of requests from the authority, the data processed will be stored for the time necessary to process the request or to protect the right. Legal basis: this processing is based on the performance of a contract for attending the relevant prize contest to which you are a party; the provision of the Personal Data listed above is necessary for this purpose, since otherwise Diesel will not be able to process your request.

the erasure of any Personal Data in relation to which we no longer have any legal basis for processing; Herein below we specify which categories of Personal Data are collected; in the following paragraph we will explain for what purposes each category of data is processed by each Data Controller or by the Joint Controllers as appropriate. “Personal Data” is information that identifies, relates to, describes, is capable of being associated with, or could reasonably be linked, directly or indirectly, with a particular individual, device, or household. OTB (Parent company of Diesel Spa and Diesel Inc.) and Diesel HQs carry out some activities as joint controllers, taking jointly the decisions regarding the purposes and means of personal data processing. Hereafter, the term “Joint Controllers” means Diesel HQs and OTB jointly considered when they process data as joint controllers. Legal basis: this processing is based on the legitimate interest pursued by the Data Controller or Joint Controller to protect their rights. Please consider that said processing activities are not intended for minors and the Data Controllers do not knowingly collect or solicit personal data from anyone under the age of 16. If you are less than 16 years old, please refrain from provide any personal data. This does not affect the applicable contract law such as the rules on the validity, formation or effect of a contract in relation to a child.

Legal basis: this processing is based on the consent you have given. In the event that you are registered in the loyalty program and decide to withdraw your consent to marketing, you will continue to receive communications relating to benefits (such as the preview access to the new collections and promotions only reserved to members). If, in addition to the withdrawal of consent, you do not want to receive this kind of communication anymore, you will be asked to specify it. Any removal from the loyalty program will also result in the cancellation of your online account, if you have one. In the description of the purposes in paragraph 3, we have specified when it is necessary to provide Personal Data. Where not expressly indicated as mandatory, therefore, the provision of Personal Data is optional and there will be no consequences if you do not provide them, unless it is impossible for the Data Controllers or Joint Controllers to act as described (for example, the impossibility to carry out marketing activities). The provision of data for this purpose is mandatory because in the absence of data the Data Controller or the Joint Controller will not be in a position to comply with their legal obligations. Legal basis: this processing is based on the legitimate interest of Diesel to improve the quality of its services and business.This is information that is not directly associated with identified users, but which by its very nature could, through processing and association with data held by third parties, allow these users to be identified.

Legal basis: this processing is based on the legitimate interest of Diesel to improve the quality of its services and business. 3.3 PURPOSES OF THE JOINT DATA CONTROLLERS (DIESEL HQs AND OTB) Legal basis: this processing is based, where required by applicable law, on the consent you have given via the appropriate opt-in disclosure.The Personal Data will be stored for the time necessary to achieve the purposes for which they were collected. In particular, the following rules will apply: The provision of data for this purpose is mandatory because in the absence of data the Data Controller or the Joint Data Controller will not be in a position to comply with their legal obligations. If you believe that the processing of your Personal Data is carried out in breach of the provisions of the GDPR, you have the right to lodge a complaint with your local competent Data Protection Authority or to start the appropriate legal actions before the competent courts.