With particular reference to the judicial protection of our rights or in case of requests from the authority, the data processed will be stored for the time necessary to process the request or to protect the right. 7. WHERE PERSONAL DATA MAY BE TRANSFERRED Only the Brave is the iconic men’s perfume by Diesel, a modern aftershave for a self-assured leader who achieves his dreams with conviction. Its emblematic bottle, a clenched fist, conveys the brave values: masculinity, power and self-confidence. We remind you that, among the rights you are granted, you have the right to refuse the consent without any disadvantages from refusal. The Brave Fragrances are made for those who live bravely, fight for their dreams, achieve their goals through determination and never give up. Legal basis: this processing is based on the performance of a contract for joining the loyalty program to which you are a party; the provision of the Personal Data listed above is necessary for this purpose, since otherwise Diesel will not be able to process your request.

OTB and Diesel carry out some activities as joint controllers, taking jointly the decisions regarding the purposes and means of personal data processing. Hereafter, the term “Joint Controllers” means Diesel and OTB jointly considered when they process data as Joint Controllers. In this paragraph we explain for what purposes each category of data is processed by each Data Controller or Joint Controller. The Personal Data will be stored for the time necessary to achieve the purposes for which they were collected. In particular, the following rules will apply: To facilitate your understanding of the processing activities carried out by the above-mentioned subjects as Controllers or Joint Controllers, we have prepared this document explaining which processing activities are carried out autonomously by each company. If you believe that the processing of your Personal Data is carried out in breach of the provisions of the GDPR, you have the right to lodge a complaint with your local competent Data Protection Authority or to start the appropriate legal actions before the competent courts.

In the description of the purposes in paragraph 3, we have specified when it is necessary to provide Personal Data. Where not expressly indicated as mandatory, therefore, the provision of Personal Data is optional and there will be no consequences if you do not provide them, unless it is impossible for the Data Controllers or Joint Controllers to act as described (for example, the impossibility to carry out marketing activities).

Education information, such as level of education completed. We source this information directly from you. We use this information to process employment applications. We do not disclose this information to third parties. Legal basis: this processing is based on the legitimate interest of Diesel to improve the quality of its services and business. With particular reference to the judicial protection of our rights or in case of requests from the authority, the data processed will be stored for the time necessary to process the request or to protect the right.

Characteristics of protected classifications, such as age or gender. We source this information directly from you. We use this information to fulfill or meet the reason you provided the information or to provide relevant services and advertising. We do not disclose this information to third parties. Diesel and OTB operate as joint controllers on the basis of a specific agreement for the purpose indicated below. In this paragraph we further explain for what purposes each category of data is processed by each Data Controller or Joint Controller. 3.1 PURPOSES OF DIESEL USA Inc. (DIESEL) In the description of the purposes in paragraph 3, we have specified when it is necessary to provide Personal Data. Where not expressly indicated as mandatory, therefore, the provision of Personal Data is optional and there will be no consequences if you do not provide them, if not the impossibility for the Data Controllers or Joint Controllers to act as described (for example, the impossibility to carry out marketing activities). INFORMATION NOTICE ON THE PROCESSING OF PERSONAL DATA PURSUANT TO ARTICLES 13 AND 14 OF EU REGULATION 679/2016 (“GDPR”)

Pursuant to Chapter III of the GDPR, you have the right to ask each Data Controller or Joint Controller:• to access to your Personal Data; data of the registered user for joining the loyalty program: the data will be kept as long as the account is active. Even after the termination of the account, we will retain the data if this will be necessary to comply with legal obligations, to protect our rights or to prevent fraud;Finally, each Data Controller or Join Controller may need to comply with a specific legal provision to which it is subject or to defend its own right in court. OTB (Parent company of Diesel Spa and Diesel Inc.) and Diesel HQs carry out some activities as joint controllers, taking jointly the decisions regarding the purposes and means of personal data processing. Hereafter, the term “Joint Controllers” means Diesel HQs and OTB jointly considered when they process data as joint controllers. OTB and Diesel carry out some activities as joint controllers, taking jointly the decisions regarding the purposes and means of personal data processing. Hereafter, the term “Joint Controllers” means Diesel and OTB jointly considered when they process data as joint controllers.