Pursuant to Chapter III of the GDPR, you have the right to ask each Data Controller or Joint Controller:• to access to your Personal Data; In any case, for technical reasons, the termination of the processing and the consequent cancellation or irreversible anonymization of the related Personal Data will be definitive within thirty days from the terms indicated above. Diesel and OTB operate as Joint Controllers on the basis of a specific agreement for the purpose indicated below.

The Personal Data (either electronical and paper copies) will be stored for the time necessary to achieve the purposes for which they were collected. In particular, the following rules will apply: Your Personal Data may be processed by each Data Controller or Joint Data Controller to defend their rights or take legal action or make claims against you or third parties.Diesel and OTB operate as joint controllers on the basis of a specific agreement for the purpose indicated below. data of the registered user for joining the loyalty program: the data will be kept as long as the account is active. Even after the termination of the account, we will retain the data for two years if this will be necessary to comply with legal obligations, to protect our rights or to prevent fraud;

With particular reference to the judicial protection of our rights or in case of requests from the authority, the data processed will be stored for the time necessary to process the request or to protect the right. Please consider that said processing activities are not intended for minors and the Data Controllers do not knowingly collect or solicit personal data from anyone under the age of 16. If you are less than 16 years old, please refrain from provide any personal data. This does not affect the applicable contract law such as the rules on the validity, formation or effect of a contract in relation to a child. Legal basis: this processing is based on the legitimate interest of Diesel to improve the quality of its services and business. 3.3 PURPOSES OF THE JOINT DATA CONTROLLERS (DIESEL HQs AND OTB)The companies collecting and processing personal data as autonomous data controllers (hereinafter the “Data Controllers” or the “Companies”) or as joint controllers are: To facilitate your understanding of the processing activities carried out by the above mentioned subjects as Controllers or Joint Controllers, we have prepared this document explaining which processing activities are carried out autonomously by each company. OTB (Parent company of Diesel Spa and Diesel Inc.) and Diesel HQs carry out some activities as joint controllers, taking jointly the decisions regarding the purposes and means of personal data processing. Hereafter, the term “Joint Controllers” means Diesel HQs and OTB jointly considered when they process data as joint controllers. employees and collaborators of the Data Processors designated by the Data Controllers or Joint Controllers, including (i) the companies managing the shops and the online store and who will be entitled to view, modify and update the Personal Data entered in the CRM systems through which the Data Controllers or the Joint Controllers carry out the processing activities for marketing and profiling purposes (ii) the companies managing the storage of the Personal Data of the Data Controllers or Joint Controllers based on agreements or local regulations;

In the description of the purposes in paragraph 3, we have specified when it is necessary to provide Personal Data. Where not expressly indicated as mandatory, therefore, the provision of Personal Data is optional and there will be no consequences if you do not provide them, if not the impossibility for the Data Controllers or Joint Controllers to act as described (for example, the impossibility to carry out marketing activities). The companies collecting and processing personal data as autonomous data controllers (hereinafter the “Data Controllers” or the “Companies”) or as Joint Controllers are: Education information, such as level of education completed. We source this information directly from you. We use this information to process employment applications. We do not disclose this information to third parties. Herein below, we specify which categories of personal data are collected; in the following paragraph we will explain for what purposes each Data Controller processes each category of data or by the Joint Controllers as appropriate (hereinafter also “Personal Data” if processed jointly).

carrying out market research, sending commercial promotions and discounts reserved to customers, commercial information - possibly also The cancellation process is carried out periodically on the basis of the customer's request or at the expiry of the retention period, through an automatic flow that involves the data bases concerned; otherwise, Personal Data will be permanently anonymized; the hard copies will be destroyed by using appropriate devices.