Your Personal Data may be processed by each Data Controller or Joint Controller to defend their rights or take legal action or make claims against you or third parties, including the prevention of frauds. Pursuant to Chapter III of the GDPR, you have the right to ask each Data Controller or Joint Controller: If you believe that the processing of your Personal Data is carried out in breach of the provisions of the GDPR, you have the right to lodge a complaint with your local competent Data Protection Authority or to start the appropriate legal actions before the competent courts. the erasure of any Personal Data in relation to which we no longer have any legal basis for processing;

OTB (Parent company of Diesel Spa and Diesel Inc.) and Diesel HQs carry out some activities as joint controllers, taking jointly the decisions regarding the purposes and means of personal data processing. Hereafter, the term “Joint Controllers” means Diesel HQs and OTB jointly considered when they process data as joint controllers. In the description of the purposes in paragraph 3, we have specified when it is necessary to provide Personal Data. Where not expressly indicated as mandatory, therefore, the provision of Personal Data is optional and there will be no consequences if you do not provide them, if not the impossibility for the Data Controllers or Joint Controllers to act as described (for example, the impossibility to carry out marketing activities). Legal basis: this processing is based, where required by applicable law, on the consent you have given via the appropriate opt-in disclosure. Each Data Controller or Joint Controller may process your Personal Data to comply with a legal obligation to which it is subject. employees and collaborators of the Data Processors designated by the Data Controllers or Joint Controllers, including (i) the companies managing the shops and the online store and who will be entitled to view, modify and update the Personal Data entered in the CRM systems through which the Data Controllers or the Joint Controllers carry out the processing activities for marketing and profiling purposes (ii) the companies managing the storage of the Personal Data of the Data Controllers or Joint Controllers based on agreements or local regulations;This is information that is not directly associated with individuals, but which by its very nature could, through processing and association with data held by third parties, allow these users to be identified. The Personal Data will be stored for the time necessary to achieve the purposes for which they were collected. In particular, the following rules will apply: Legal basis: this processing is based on the legitimate interest of Diesel to improve the quality of its services and business.

the right to opt-out of the sale of your Personal Data to third parties. We do not sell your Personal Data at this time, and we do not sell the Personal Data of children under 16 years old; In the description of the purposes in paragraph 3, we have specified when it is necessary to provide Personal Data. Where not expressly indicated as mandatory, therefore, the provision of Personal Data is optional and there will be no consequences if you do not provide them, unless it is impossible for the Data Controllers or Joint Controllers to act as described (for example, the impossibility to carry out marketing activities). In the description of the purposes in paragraph 3, we have specified when it is necessary to provide Personal Data. Where not expressly indicated as mandatory, therefore, the provision of Personal Data is optional and there will be no consequences if you do not provide them, if not the impossibility for the Data Contr Please consider that said processing activities are not intended for minors and the Data Controllers do not knowingly collect or solicit personal data from anyone under the age of 16. If you are less than 16 years old, please refrain from provide any personal data. This does not affect the applicable contract law such as the rules on the validity, formation or effect of a contract in relation to a child. Your Personal Data may be processed by each Data Controller or Joint Data Controller to defend their rights or take legal action or make claims against you or third parties.This is information that is not directly associated with identified users, but which by its very nature could, through processing and association with data held by third parties, allow these users to be identified. Each Company collects different categories of personal data according to the purpose for which it processes them. In the event that you are registered in the loyalty program and decide to withdraw your consent or opt-out to marketing, you will continue to receive communications relating to benefits (such as the Birthday or Anniversary Gift or preview access to the new collections and promotions only reserved to members). If, in addition to the withdrawal of consent or the opt out for marketing activities, you do not want to receive this kind of communication anymore, you will be asked to specify it. Any removal from the loyalty program will also result in the cancellation of your online account, if you have one.

As of January 1, 2020, you may be entitled to the below rights:• the right to know. You may request information about the categories and specific pieces of Personal Data we have collected about you over the last 12 months, as well as the categories of sources from which such information is collected, the purpose for collecting such information, and the sale or disclosure for business purposes of your Personal Data to third parties, and the categories of third parties with whom this information was shared. You may also request a copy of the Personal Data we have collected, and upon request, we will provide this information to you in electronic form; a. Purposes related to the obligations established by laws or regulations, by decisions/requests of competent authorities or by supervisory and control bodiesDiesel may also process your Personal Data for administrative, accounting and internal statistical analysis for business planning purposes. For recurring promotional text messages to you at the number provided also Terms & Conditions apply. For the purposes indicated above, we may also transfer your Personal Data to Europe, in particular to Italy where OTB and Diesel HQS are seated. 8. WHO WILL PROCESS PERSONAL DATA The companies collecting and processing personal data as autonomous data controllers (hereinafter the “Data Controllers” or the “Companies”) or as joint controllers are: Legal basis: this processing is based on the performance of a contract for joining the loyalty program to which you are a party; the provision of the Personal Data listed above is necessary for this purpose, since otherwise Diesel will not be able to process your request.