The provision of data for this purpose is mandatory because in the absence of data the Data Controller or the Joint Data Controller will not be in a position to comply with their legal obligations. carrying out market research, sending commercial promotions and discounts reserved to customers, commercial information - possibly also Finally, each Data Controller or Join Controller may need to comply with a specific legal provision to which it is subject or to defend its own right in court. data of the registered user for joining the loyalty program: the data will be kept as long as the account is active. Even after the termination of the account, we will retain the data if this will be necessary to comply with legal obligations, to protect our rights or to prevent fraud; For the purposes indicated above, we may also transfer your Personal Data to Europe, in particular to Italy where OTB and Diesel HQS are seated. 8. WHO WILL PROCESS PERSONAL DATA

In this paragraph we explain for what purposes each category of data is processed by each Data Controller or Joint Controller. the limitation of the way in which we process your Personal Data, within the limits set by the applicable law data protection law.

15. SECURITY

In the description of the purposes in paragraph 3, we have specified when it is necessary to provide Personal Data. Where not expressly indicated as mandatory, therefore, the provision of Personal Data is optional and there will be no consequences if you do not provide them, if not the impossibility for the Data Controllers or Joint Controllers to act as described (for example, the impossibility to carry out marketing activities). a. Purposes related to the obligations established by laws or regulations, by decisions/requests of competent authorities or by supervisory and control bodies INFORMATION NOTICE ON THE PROCESSING OF PERSONAL DATA PURSUANT TO ARTICLES 13 AND 14 OF EU REGULATION 679/2016 (“GDPR”) Your Personal Data may be processed by each Data Controller or Joint Data Controller to defend their rights or take legal action or make claims against you or third parties. Legal basis: this processing is based on the consent you have given. In the event that you are registered in the loyalty program and decide to withdraw your consent to marketing, you will continue to receive communications relating to benefits (such as the Birthday or Anniversary Gift or preview access to the new collections and promotions only reserved to members). If, in addition to the withdrawal of consent, you do not want to receive this kind of communication anymore, you will be asked to specify it. Any removal from the loyalty program will also result in the cancellation of your online account, if you have one.

If you believe that the processing of your Personal Data is carried out in breach of the provisions of the GDPR, you have the right to lodge a complaint with your local competent Data Protection Authority or to start the appropriate legal actions before the competent courts. the right to opt-out of the sale of your Personal Data to third parties. We do not sell your Personal Data at this time, and we do not sell the Personal Data of children under 16 years old; In this paragraph we further explain for what purposes each category of data is processed by each Data Controller or Joint Controller. 3.1 PURPOSES OF DIESEL USA Inc. (DIESEL) Legal basis: this processing is based on the legitimate interest pursued by the Data Controller or Joint Controller to protect their rights.As of January 1, 2020, you may be entitled to the below rights:• the right to know. You may request information about the categories and specific pieces of Personal Data we have collected about you over the last 12 months, as well as the categories of sources from which such information is collected, the purpose for collecting such information, and the sale or disclosure for business purposes of your Personal Data to third parties, and the categories of third parties with whom this information was shared. You may also request a copy of the Personal Data we have collected, and upon request, we will provide this information to you in electronic form; To facilitate your understanding of the processing activities carried out by the above mentioned subjects as Controllers or Joint Controllers, we have prepared this document explaining which processing activities are carried out autonomously by each company.

Herein below we specify which categories of personal data are collected; in the following paragraph we will explain for what purposes each category of data is processed by each Data Controller or by the Joint Controllers as appropriate (hereinafter also “Personal Data” if processed jointly). employees and collaborators of the Data Controllers or of the Joint Controllers processing data under the authority of the Data Controllers or of the Joint Controllers; Loyalty Data: : your data collected as part of the “House of Diesel” loyalty program, whose Regulation is available at the following link, and based on your engagement with the brand (e.g., social media “like”, “comment”, “share”, “save”, “follow Diesel’s official account”, “share photos on community platform”, “create Wishlist and e-store avatar” etc.); Education information, such as level of education completed. We source this information directly from you. We use this information to process employment applications. We do not disclose this information to third parties. In any case, for technical reasons, the termination of the processing and the consequent cancellation or irreversible anonymization of the related Personal Data will be definitive within thirty days from the terms indicated above.Legal basis: this processing is based on the legitimate interest of Diesel in the pursuit of improving its performance and its relationship with the clients. 3.2 PURPOSES OF DIESEL S.P.A In the event that you are registered in the loyalty program and decide to withdraw your consent or opt-out to marketing, you will continue to receive communications relating to benefits (such as the Birthday or Anniversary Gift or preview access to the new collections and promotions only reserved to members). If, in addition to the withdrawal of consent or the opt out for marketing activities, you do not want to receive this kind of communication anymore, you will be asked to specify it. Any removal from the loyalty program will also result in the cancellation of your online account, if you have one.