Diesel and OTB operate as Joint Controllers on the basis of a specific agreement for the purpose indicated below. Legal basis: this processing is based on the legitimate interest of Diesel in the pursuit of improving its performance and its relationship with the clients. 3.2 PURPOSES OF DIESEL S.P.A

Diesel may also process your Personal Data for administrative, accounting and internal statistical analysis for business planning purposes.

Right to object: in addition to the rights listed above, you always have the right to object at any time to the processing of your Personal Data carried out by the Data Controller or Joint Controller for the pursuit of its legitimate interest. As of January 1, 2020, you may be entitled to the below rights:• the right to know. You may request information about the categories and specific pieces of Personal Data we have collected about you over the last 12 months, as well as the categories of sources from which such information is collected, the purpose for collecting such information, and the sale or disclosure for business purposes of your Personal Data to third parties, and the categories of third parties with whom this information was shared. You may also request a copy of the Personal Data we have collected, and upon request, we will provide this information to you in electronic form; the limitation of the way in which we process your Personal Data, within the limits set by the applicable law data protection law. The companies collecting and processing personal data as autonomous data controllers (hereinafter the “Data Controllers” or the “Companies”) or as joint controllers are: Your Personal Data may be processed by each Data Controller or Joint Controller to defend their rights or take legal action or make claims against you or third parties, including the prevention of fraud.

To facilitate your understanding of the processing activities carried out by the above-mentioned subjects as Controllers or Joint Controllers, we have prepared this document explaining which processing activities each Company carries out autonomously by each company. Herein below, we specify which categories of personal data are collected; in the following paragraph we will explain for what purposes each Data Controller processes each category of data or by the Joint Controllers as appropriate (hereinafter also “Personal Data” if processed jointly). Loyalty Data: your data collected as part of the “House of Diesel” loyalty program, whose Regulation is available at the following link, and based on your engagement with the brand (e.g., social media “like”, “comment”, “share”, “save”, “follow Diesel’s official account”, “share photos on community platform”, “create Wishlist and e-store avatar” etc.); Legal basis: this processing is based on the performance of a contract for attending the relevant prize contest to which you are a party; the provision of the Personal Data listed above is necessary for this purpose, since otherwise Diesel will not be able to process your request. Legal basis: this processing is based on the performance of a contract for joining the loyalty program to which you are a party; the provision of the Personal Data listed above is necessary for this purpose, since otherwise Diesel will not be able to process your request.a. Purposes related to the obligations established by laws or regulations, by decisions/requests of competent authorities or by supervisory and control bodies The provision of data for this purpose is mandatory because in the absence of data the Data Controller or the Joint Controller will not be in a position to comply with their legal obligations. With particular reference to the judicial protection of our rights or in case of requests from the authority, the data processed will be stored for the time necessary to process the request or to protect the right. Each Data Controller or Joint Data Controller may process your Personal Data to comply with a legal obligation to which it is subject. Education information, such as level of education completed. We source this information directly from you. We use this information to process employment applications. We do not disclose this information to third parties.