The Personal Data will be stored for the time necessary to achieve the purposes for which they were collected. In particular, the following rules will apply: The provision of data for this purpose is mandatory because in the absence of data the Data Controller or the Joint Data Controller will not be in a position to comply with their legal obligations. As of January 1, 2020, you may be entitled to the below rights:• the right to know. You may request information about the categories and specific pieces of Personal Data we have collected about you over the last 12 months, as well as the categories of sources from which such information is collected, the purpose for collecting such information, and the sale or disclosure for business purposes of your Personal Data to third parties, and the categories of third parties with whom this information was shared. You may also request a copy of the Personal Data we have collected, and upon request, we will provide this information to you in electronic form; to receive the copy of the Personal Data you provided us (so-called “data portability”) and to have data transmitted to another controller, if technically possible;

Diesel may also process your Personal Data for administrative, accounting and internal statistical analysis for business planning purposes. data of the registered user for joining the loyalty program: the data will be kept as long as the account is active. Even after the termination of the account, we will retain the data if this will be necessary to comply with legal obligations, to protect our rights or to prevent fraud; In any case, for technical reasons, the termination of the processing and the consequent cancellation or irreversible anonymization of the related Personal Data will be definitive within thirty days from the terms indicated above. Pursuant to Chapter III of the GDPR, you have the right to ask each Data Controller or Joint Controller:• to access to your Personal Data; the erasure of any Personal Data in relation to which we no longer have any legal basis for processing;Legal basis: this processing is based on the legitimate interest of Diesel in the pursuit of improving its performance and its relationship with the clients. 3.2 PURPOSES OF DIESEL S.P.A Finally, each Data Controller or Join Controller may need to comply with a specific legal provision to which it is subject or to defend its own right in court. Education information, such as level of education completed. We source this information directly from you. We use this information to process employment applications. We do not disclose this information to third parties. To facilitate your understanding of the processing activities carried out by the above mentioned subjects as Controllers or Joint Controllers, we have prepared this document explaining which processing activities are carried out autonomously by each company. For the purposes indicated above, we may also transfer your Personal Data to Europe, in particular to Italy where OTB and Diesel HQS are seated. 8. WHO WILL PROCESS PERSONAL DATA

Right to object: in addition to the rights listed above, you always have the right to object at any time to the processing of your Personal Data carried out by the Data Controller or Joint Controller for the pursuit of its legitimate interest. In the event that you are registered in the loyalty program and decide to withdraw your consent or opt-out to marketing, you will continue to receive communications relating to benefits (such as the Birthday or Anniversary Gift or preview access to the new collections and promotions only reserved to members). If, in addition to the withdrawal of consent or the opt out for marketing activities, you do not want to receive this kind of communication anymore, you will be asked to specify it. Any removal from the loyalty program will also result in the cancellation of your online account, if you have one. the right to opt-out of the sale of your Personal Data to third parties. We do not sell your Personal Data at this time, and we do not sell the Personal Data of children under 16 years old;Legal basis: this processing is based on the consent you have given. In the event that you are registered in the loyalty program and decide to withdraw your consent to marketing, you will continue to receive communications relating to benefits (such as the preview access to the new collections and promotions only reserved to members). If, in addition to the withdrawal of consent, you do not want to receive this kind of communication anymore, you will be asked to specify it. Any removal from the loyalty program will also result in the cancellation of your online account, if you have one. Legal basis: this processing is based on the consent you have given. In the event that you are registered in the loyalty program and decide to withdraw your consent to marketing, you will continue to receive communications relating to benefits (such as the Birthday or Anniversary Gift or preview access to the new collections and promotions only reserved to members). If, in addition to the withdrawal of consent, you do not want to receive this kind of communication anymore, you will be asked to specify it. Any removal from the loyalty program will also result in the cancellation of your online account, if you have one. Legal basis: this processing is based on the legitimate interest of Diesel to improve the quality of its services and business. 3.3 PURPOSES OF THE JOINT DATA CONTROLLERS (DIESEL HQs AND OTB) employees and collaborators of the Data Controllers or of the Joint Controllers processing data under the authority of the Data Controllers or of the Joint Controllers; Herein below we specify which categories of Personal Data are collected; in the following paragraph we will explain for what purposes each category of data is processed by each Data Controller or by the Joint Controllers as appropriate. “Personal Data” is information that identifies, relates to, describes, is capable of being associated with, or could reasonably be linked, directly or indirectly, with a particular individual, device, or household.

With particular reference to the judicial protection of our rights or in case of requests from the authority, the data processed will be stored for the time necessary to process the request or to protect the right. Each Data Controller or Joint Controller may process your Personal Data to comply with a legal obligation to which it is subject. In this paragraph we further explain for what purposes each category of data is processed by each Data Controller or Joint Controller. 3.1 PURPOSES OF DIESEL USA Inc. (DIESEL)OTB (Parent company of Diesel Spa and Diesel Inc.) and Diesel HQs carry out some activities as joint controllers, taking jointly the decisions regarding the purposes and means of personal data processing. Hereafter, the term “Joint Controllers” means Diesel HQs and OTB jointly considered when they process data as joint controllers.