With particular reference to the judicial protection of our rights or in case of requests from the authority, the data processed will be stored for the time necessary to process the request or to protect the right. In the description of the purposes in paragraph 3, we have specified when it is necessary to provide Personal Data. Where not expressly indicated as mandatory, therefore, the provision of Personal Data is optional and there will be no consequences if you do not provide them, if not the impossibility for the Data Contr

This is information that is not directly associated with identified users, but which by its very nature could, through processing and association with data held by third parties, allow these users to be identified. Finally, each Data Controller or Join Controller may need to comply with a specific legal provision to which it is subject or to defend its own right in court. With particular reference to the judicial protection of our rights or in case of requests from the authority, the data processed will be stored for the time necessary to process the request or to protect the right. 7. WHERE PERSONAL DATA MAY BE TRANSFERRED In this paragraph we further explain for what purposes each category of data is processed by each Data Controller or Joint Controller. 3.1 PURPOSES OF DIESEL USA Inc. (DIESEL) Characteristics of protected classifications, such as age or gender. We source this information directly from you. We use this information to fulfill or meet the reason you provided the information or to provide relevant services and advertising. We do not disclose this information to third parties.

In the description of the purposes in paragraph 3, we have specified when it is necessary to provide Personal Data. Where not expressly indicated as mandatory, therefore, the provision of Personal Data is optional and there will be no consequences if you do not provide them, unless it is impossible for the Data Controllers or Joint Controllers to act as described (for example, the impossibility to carry out marketing activities). Legal basis: this processing is based on the legitimate interest of Diesel in the pursuit of improving its performance and its relationship with the clients. 3.2 PURPOSES OF DIESEL S.P.A

In any case, for technical reasons, the termination of the processing and the consequent cancellation or irreversible anonymization of the related Personal Data will be definitive within thirty days from the terms indicated above. Each Data Controller or Joint Controller may process your Personal Data to comply with a legal obligation to which it is subject. b. Defense of rights during judicial, administrative or extra-judicial proceedings and in disputes arising in connection with the services offered OTB (Parent company of Diesel Spa and Diesel Inc.) and Diesel HQs carry out some activities as joint controllers, taking jointly the decisions regarding the purposes and means of personal data processing. Hereafter, the term “Joint Controllers” means Diesel HQs and OTB jointly considered when they process data as joint controllers. The companies collecting and processing personal data as autonomous data controllers (hereinafter the “Data Controllers” or the “Companies”) or as joint controllers are:For the purposes indicated above, we may also transfer your Personal Data to Europe, in particular to Italy where OTB and Diesel HQS are seated. 8. WHO WILL PROCESS PERSONAL DATA the limitation of the way in which we process your Personal Data, within the limits set by the applicable law data protection law. As of January 1, 2020, you may be entitled to the below rights:• the right to know. You may request information about the categories and specific pieces of Personal Data we have collected about you over the last 12 months, as well as the categories of sources from which such information is collected, the purpose for collecting such information, and the sale or disclosure for business purposes of your Personal Data to third parties, and the categories of third parties with whom this information was shared. You may also request a copy of the Personal Data we have collected, and upon request, we will provide this information to you in electronic form;

Loyalty Data: your data collected as part of the “House of Diesel” loyalty program, whose Regulation is available at the following link, and based on your engagement with the brand (e.g., social media “like”, “comment”, “share”, “save”, “follow Diesel’s official account”, “share photos on community platform”, “create Wishlist and e-store avatar” etc.); employees and collaborators of the Data Controllers or of the Joint Controllers processing data under the authority of the Data Controllers or of the Joint Controllers; a. Purposes related to the obligations established by laws or regulations, by decisions/requests of competent authorities or by supervisory and control bodies employees and collaborators of the Data Processors designated by the Data Controllers or Joint Controllers, including (i) the companies managing the shops and the online store and who will be entitled to view, modify and update the Personal Data entered in the CRM systems through which the Data Controllers or the Joint Controllers carry out the processing activities for marketing and profiling purposes (ii) the companies managing the storage of the Personal Data of the Data Controllers or Joint Controllers based on agreements or local regulations;the right to opt-out of the sale of your Personal Data to third parties. We do not sell your Personal Data at this time, and we do not sell the Personal Data of children under 16 years old; Each Company collects different categories of personal data according to the purpose for which it processes them. This is information that is not directly associated with individuals, but which by its very nature could, through processing and association with data held by third parties, allow these users to be identified.

Legal basis: this processing is based, where required by applicable law, on the consent you have given via the appropriate opt-in disclosure.Your Personal Data may be processed by each Data Controller or Joint Controller to defend their rights or take legal action or make claims against you or third parties, including the prevention of frauds. Loyalty Data: : your data collected as part of the “House of Diesel” loyalty program, whose Regulation is available at the following link, and based on your engagement with the brand (e.g., social media “like”, “comment”, “share”, “save”, “follow Diesel’s official account”, “share photos on community platform”, “create Wishlist and e-store avatar” etc.); Pursuant to Chapter III of the GDPR, you have the right to ask each Data Controller or Joint Controller: To facilitate your understanding of the processing activities carried out by the above mentioned subjects as Controllers or Joint Controllers, we have prepared this document explaining which processing activities are carried out autonomously by each company. data of the registered user for joining the loyalty program: the data will be kept as long as the account is active. Even after the termination of the account, we will retain the data if this will be necessary to comply with legal obligations, to protect our rights or to prevent fraud;