Legal basis: this processing is based on the consent you have given. In the event that you are registered in the loyalty program and decide to withdraw your consent to marketing, you will continue to receive communications relating to benefits (such as the Birthday or Anniversary Gift or preview access to the new collections and promotions only reserved to members). If, in addition to the withdrawal of consent, you do not want to receive this kind of communication anymore, you will be asked to specify it. Any removal from the loyalty program will also result in the cancellation of your online account, if you have one. Your Personal Data may be processed by each Data Controller or Joint Controller to defend their rights or take legal action or make claims against you or third parties, including the prevention of frauds. Characteristics of protected classifications, such as age or gender. We source this information directly from you. We use this information to fulfill or meet the reason you provided the information or to provide relevant services and advertising. We do not disclose this information to third parties. In the description of the purposes in paragraph 3, we have specified when it is necessary to provide Personal Data. Where not expressly indicated as mandatory, therefore, the provision of Personal Data is optional and there will be no consequences if you do not provide them, if not the impossibility for the Data Contr

INFORMATION NOTICE ON THE PROCESSING OF PERSONAL DATA PURSUANT TO ARTICLES 13 AND 14 OF EU REGULATION 679/2016 (“GDPR”) Loyalty Data: : your data collected as part of the “House of Diesel” loyalty program, whose Regulation is available at the following link, and based on your engagement with the brand (e.g., social media “like”, “comment”, “share”, “save”, “follow Diesel’s official account”, “share photos on community platform”, “create Wishlist and e-store avatar” etc.); Right to object: in addition to the rights listed above, you always have the right to object at any time to the processing of your Personal Data carried out by the Data Controller or Joint Controller for the pursuit of its legitimate interest.

3.3 PURPOSES OF EACH DATA CONTROLLER OR JOINT CONTROLLER

employees and collaborators of the Data Controllers or of the Joint Controllers processing data under the authority of the Data Controllers or of the Joint Controllers; carrying out market research, sending commercial promotions and discounts reserved to customers, commercial information - possibly also With particular reference to the judicial protection of our rights or in case of requests from the authority, the data processed will be stored for the time necessary to process the request or to protect the right. 7. WHERE PERSONAL DATA MAY BE TRANSFERRED In this paragraph we explain for what purposes each category of data is processed by each Data Controller or Joint Controller.

If you believe that the processing of your Personal Data is carried out in breach of the provisions of the GDPR, you have the right to lodge a complaint with your local competent Data Protection Authority or to start the appropriate legal actions before the competent courts. To facilitate your understanding of the processing activities carried out by the above mentioned subjects as Controllers or Joint Controllers, we have prepared this document explaining which processing activities are carried out autonomously by each company. In any case, for technical reasons, the termination of the processing and the consequent cancellation or irreversible anonymization of the related Personal Data will be definitive within thirty days from the terms indicated above. a. Purposes related to the obligations established by laws or regulations, by decisions/requests of competent authorities or by supervisory and control bodies Legal basis: this processing is based on the legitimate interest of Diesel to improve the quality of its services and business.With particular reference to the judicial protection of our rights or in case of requests from the authority, the data processed will be stored for the time necessary to process the request or to protect the right. Each Data Controller or Joint Controller may process your Personal Data to comply with a legal obligation to which it is subject.