b. Defense of rights during judicial, administrative or extra-judicial proceedings and in disputes arising in connection with the services offered

OTB and Diesel carry out some activities as joint controllers, taking jointly the decisions regarding the purposes and means of personal data processing. Hereafter, the term “Joint Controllers” means Diesel and OTB jointly considered when they process data as joint controllers. Your Personal Data may be processed by each Data Controller or Joint Controller to defend their rights or take legal action or make claims against you or third parties, including the prevention of frauds. For the purposes indicated above, we may also transfer your Personal Data to Europe, in particular to Italy where OTB and Diesel HQS are seated. 8. WHO WILL PROCESS PERSONAL DATA

Returns

Legal basis: this processing is based, where required by applicable law, on the consent you have given via the appropriate opt-in disclosure. Diesel and OTB operate as joint controllers on the basis of a specific agreement for the purpose indicated below. This is information that is not directly associated with identified users, but which by its very nature could, through processing and association with data held by third parties, allow these users to be identified.

Legal basis: this processing is based on the consent you have given. In the event that you are registered in the loyalty program and decide to withdraw your consent to marketing, you will continue to receive communications relating to benefits (such as the Birthday or Anniversary Gift or preview access to the new collections and promotions only reserved to members). If, in addition to the withdrawal of consent, you do not want to receive this kind of communication anymore, you will be asked to specify it. Any removal from the loyalty program will also result in the cancellation of your online account, if you have one. Legal basis: this processing is based on the legitimate interest of Diesel to improve the quality of its services and business. 3.3 PURPOSES OF THE JOINT DATA CONTROLLERS (DIESEL HQs AND OTB)As of January 1, 2020, you may be entitled to the below rights:• the right to know. You may request information about the categories and specific pieces of Personal Data we have collected about you over the last 12 months, as well as the categories of sources from which such information is collected, the purpose for collecting such information, and the sale or disclosure for business purposes of your Personal Data to third parties, and the categories of third parties with whom this information was shared. You may also request a copy of the Personal Data we have collected, and upon request, we will provide this information to you in electronic form; Legal basis: this processing is based on the performance of a contract for attending the relevant prize contest to which you are a party; the provision of the Personal Data listed above is necessary for this purpose, since otherwise Diesel will not be able to process your request.

Herein below we specify which categories of Personal Data are collected; in the following paragraph we will explain for what purposes each category of data is processed by each Data Controller or by the Joint Controllers as appropriate. “Personal Data” is information that identifies, relates to, describes, is capable of being associated with, or could reasonably be linked, directly or indirectly, with a particular individual, device, or household. employees and collaborators of the Data Processors designated by the Data Controllers or Joint Controllers, including (i) the companies managing the shops and the online store and who will be entitled to view, modify and update the Personal Data entered in the CRM systems through which the Data Controllers or the Joint Controllers carry out the processing activities for marketing and profiling purposes (ii) the companies managing the storage of the Personal Data of the Data Controllers or Joint Controllers based on agreements or local regulations;In this paragraph we explain for what purposes each category of data is processed by each Data Controller or Joint Controller. In any case, for technical reasons, the termination of the processing and the consequent cancellation or irreversible anonymization of the related Personal Data will be definitive within thirty days from the terms indicated above. In the description of the purposes in paragraph 3, we have specified when it is necessary to provide Personal Data. Where not expressly indicated as mandatory, therefore, the provision of Personal Data is optional and there will be no consequences if you do not provide them, if not the impossibility for the Data Controllers or Joint Controllers to act as described (for example, the impossibility to carry out marketing activities). Legal basis: this processing is based on the legitimate interest of Diesel to verify and improve the quality of its services.