Each Data Controller or Joint Controller may process your Personal Data to comply with a legal obligation to which it is subject. Please consider that said processing activities are not intended for minors and the Data Controllers do not knowingly collect or solicit personal data from anyone under the age of 16. If you are less than 16 years old, please refrain from provide any personal data. This does not affect the applicable contract law such as the rules on the validity, formation or effect of a contract in rela Legal basis: this processing is based on the consent you have given. In the event that you are registered in the loyalty program and decide to withdraw your consent to marketing, you will continue to receive communications relating to benefits (such as the preview access to the new collections and promotions only reserved to members). If, in addition to the withdrawal of consent, you do not want to receive this kind of communication anymore, you will be asked to specify it. Any removal from the loyalty program will also result in the cancellation of your online account, if you have one. The Personal Data (either electronical and paper copies) will be stored for the time necessary to achieve the purposes for which they were collected. In particular, the following rules will apply:

Diesel and OTB operate as joint controllers on the basis of a specific agreement for the purpose indicated below.To facilitate your understanding of the processing activities carried out by the above-mentioned subjects as Controllers or Joint Controllers, we have prepared this document explaining which processing activities each Company carries out autonomously by each company. these terms and conditions in full. If you disagree with any part of these terms and conditions, do

Legal basis: this processing is based on the legitimate interest of Diesel in the pursuit of improving its performance and its relationship with the clients. 3.2 PURPOSES OF DIESEL S.P.A carrying out market research, sending commercial promotions and discounts reserved to customers, commercial information - possibly also

1. WHO COLLECT YOUR PERSONAL DATA

In this paragraph we further explain for what purposes each category of data is processed by each Data Controller or Joint Controller. 3.1 PURPOSES OF DIESEL USA Inc. (DIESEL) With particular reference to the judicial protection of our rights or in case of requests from the authority, the data processed will be stored for the time necessary to process the request or to protect the right. 7. WHERE PERSONAL DATA MAY BE TRANSFERRED Your Personal Data may be processed by each Data Controller or Joint Controller to defend their rights or take legal action or make claims against you or third parties, including the prevention of frauds.

Your Personal Data may be processed by each Data Controller or Joint Controller to defend their rights or take legal action or make claims against you or third parties, including the prevention of fraud. Herein below we specify which categories of personal data are collected; in the following paragraph we will explain for what purposes each category of data is processed by each Data Controller or by the Joint Controllers as appropriate (hereinafter also “Personal Data” if processed jointly). Finally, each Data Controller or Join Controller may need to comply with a specific legal provision to which it is subject or to defend its own right in court. Herein below we specify which categories of Personal Data are collected; in the following paragraph we will explain for what purposes each category of data is processed by each Data Controller or by the Joint Controllers as appropriate. “Personal Data” is information that identifies, relates to, describes, is capable of being associated with, or could reasonably be linked, directly or indirectly, with a particular individual, device, or household.Legal basis: this processing is based on the performance of a contract for joining the loyalty program to which you are a party; the provision of the Personal Data listed above is necessary for this purpose, since otherwise Diesel will not be able to process your request. the right to opt-out of the sale of your Personal Data to third parties. We do not sell your Personal Data at this time, and we do not sell the Personal Data of children under 16 years old;

Each Data Controller or Joint Data Controller may process your Personal Data to comply with a legal obligation to which it is subject. Legal basis: this processing is based on the legitimate interest of Diesel to improve the quality of its services and business.Each Company collects different categories of personal data according to the purpose for which it processes them. To facilitate your understanding of the processing activities carried out by the above mentioned subjects as Controllers or Joint Controllers, we have prepared this document explaining which processing activities are carried out autonomously by each company. b. Defense of rights during judicial, administrative or extra-judicial proceedings and in disputes arising in connection with the services offered Herein below, we specify which categories of personal data are collected; in the following paragraph we will explain for what purposes each Data Controller processes each category of data or by the Joint Controllers as appropriate (hereinafter also “Personal Data” if processed jointly).