Identity information – includes: any information that identifies you as an individual, living person, name [first, last, initials], Date of Birth, e-mail address, phone number, unique consumer identifier number (including your adiClub membership number or ID, or ID from any adidas Platform), nickname, password, social media identifiers and information passed along to us via your Facebook, Runtastic (adidas Running or adidas Training) or adiClub account, your device fingerprint (including your browser fingerprint), gift card codes that are assigned to you and the IP address of your browser. We use it to verify your identity.

Contact information - includes: any information we can use to contact you, your phone number, shipping and billing address, e-mail address, Messenger ID, social media handle, any other communication channel you have used to contact us for more information. We use it to contact you for different reasons depending on the purposes stated below.

Location information - includes: any information we can use to know or guess where you are, real-time or otherwise, your residential location, current log-in location [IP address], real-time device location information via devices sensors and signals, GPS location (if you wish to share us, for example through your mobile device settings), or information that helps us guess where you are, or when you “check-in” to an event or website on a social media page indicating location and if it is shared with us. We use it to help you find what you are looking for at your current location.

Size information - includes: shoe size, clothes size, height, weight, chest, waist, hip, inseam, body shape, heel-toe measurement. We use it to make sure your gear fits.

Payment, purchase and transaction information - includes: any information we use to complete or in relation to your purchase record and invoice, your payment information (credit card details or payment platform details), payment risk profile (provided to us by our payment risk solution), shopping cart (your ordered items), delivery details, shipping and billing address, customer order number, purchase history with adidas, receipt number, transaction ID, invoice ID, retail store transaction ID, purchase value, order confirmation number, order tracking number, and any other information related to your purchase. We use it to complete your order on adidas sites and apps, in adidas stores, or other selling platforms.

Behavioural and Profile information- includes: any information which indicates your preference, whether explicitly – if provided by you- or inferred, activity preference (sports), event participation information, exercise plans, in-store digital interactions, site/brand preference, language preference, product and product attributes preferences, store location preferences, your shopping history (all items in shopping carts), Wishlist items, your browsing behaviour, your browsing preferences, any shopping “preference”details you provided to us in your profile and Platform setting, any information you provide to us when you interact with our communities such as adidas Runners, participate in events or campaigns as a trainer, team members, a participant or promoter of our events, in-store interactions, your workout history, product reviews, social media interactions with us, and any other intelligence we have about you to help us learn you as a consumer better, including “Community information”. We use it to know you better as a consumer, so we can send you marketing messages containing only products and services that we think you might be interested in.

Community information – includes: information provided by you when you participate various adidas events and communities either as a trainer, team member, a participant or as a promoter of our events, including for example: pictures, videos, your nickname, your team, your interests and preferences, your feedback, leader boards, event participation, joined groups, and registration details. We use this information to organise the events and communities, and to know more about you as a consumer.

Social Media Interaction and Activity information – includes: any information about you that we obtain through different social media channels such as Facebook, Instagram, Google, etc. when we use these channels for advertising, analytics purposes or to enrich your profile with adidas, including: any social media information that is publicly available such as your social media handles, social media interactions and public postings, your “Likes” and other reactions, your social media connections, your photos that are public, or those you send to us by mentioning us or following our social media posts by using “handles” or “hashtags”, comments or messages you shared with us publicly or privately on social media platforms. Also, we may be able to obtain this information indirectly from social media companies (e.g. Facebook, Snapchat, Google, Instagram, etc.) when we advertise on these platforms, which may include your participation and membership on particular topics and/or groups, your profile settings and preference, your behaviour on different platforms owned by the same company.

Mobile Device information – includes: Information about your device or browser that give us an idea about your browsing behaviour or device usage, device EUI, device ID, device fingerprint, IP/Wifi information, operating system, data stored on device when access is granted, log information when access to device (such as camera) is granted. Your device information is collected by our app, and your browser information is collected by our cookies, tags, and pixels. This is often required for network security purposes. This includes, but not limited to: IP address, date and time of the visit, how long you remained on our website, the referral URL (if you came to our site via a different site or an advertisement), the pages visited on our site, your browser type, device type, versions, operating system.

Fitness Activity information - includes: any information connected to your fitness activity which you track using our Platforms (including adidas Running and Training), activity type, distance, exercise duration, exercise routine (start and end times), fitness score, pace, space utilisation data, speed, sensor data (for example step goal, duration, pace, distance, calories, heartbeat, RunScore and speed), and other data related to your fitness app (for example adidas Running and adidas Training apps). We use it to help you improve your performance goals and improve your user experiences and identify what products might be best for you based on your exercise patterns.

Correspondence – includes: any correspondence you have with Customer Service teams, and/or our employees and personnel, conversation we have when you contact customer service, the emails you write to us about our products or services, the complaints you address to us via post, e-mail, fax, or call, or messages to our platforms, notes we prepared on your feedback, call back from our Customer Service to you, voice recordings made by Customer Services when we have the right to do so, and any other communication between you and adidas personnel/service providers. We record all Customer Service calls for quality assurance purposes.

Preference information - includes: preferred language, log-in location, Wishlist items, preferred shipping address, browsing preferences, our correspondence with you, your adidas product reviews. We use it to give you convenience when you visit and/or shop on our sites and apps.

adiClub information – includes: Unique Member Identifier (member ID), date you became a member, store ID (if you signed up in a retail store), source ID, country and brand of your original membership, membership points, engagement history, rewards history, membership vouchers associated to members. All the information the listed here will be kept for as long as you are an adiClub member.

Membership Administration Information – includes: any information related to your adiClub membership, email address, Member ID, first and last name, mobile phone number, member tier, tier achievement date, points balance, discount coupons available, vouchers in value, acquisition source ID (where you signed up to our membership), your membership country, adiClub Member ID, date you became a member, store ID (if you signed up in a retail store including an adidas licensed store), membership points, engagement history, rewards history, membership vouchers assigned to you.

Browsing Information – includesany information on. Your browsing behaviour. This may include: browser name, IP address (including hashed IP address), clickstream data, data and time of site visits, time remained on site, pages visited, and the links you have clicked in our marketing messages or website , the referral URL that brought you to our site.

Image and Recording – includes Any image, voice or video recordings we have captured or obtained where you may be identified. This may include: CCTV footages, photos taken in our retail stores and/or at events, video recordings made during events or specific interactions, voice recording made during events or interactions (excluding correspondence with Customer Service), any images you share with us through social media.

Health Information – includesany information that relates to your health or vitals such as your body mass index (BMI), heartbeat per minute, or information of any disability. This is used only when you have allowed us to use it – with your consent - for specific reasons and purposes.

Personal Opinion – includesany opinion you share with us that indicate your point of view and comments. This may include when you provide us feedback and review rating our service or products, or if you participate in any product research and development discussions.

Sensitive Personal Opinion – includesany opinion you share that may indicate or reveal certain characteristics about you including your political view, your sexual orientation, information about race and ethnicity, religious or philosophical beliefs, trade union membership or health. This is used only when you have allowed us to use it – with your consent - for specific reasons and purposes.

Purpose

I. Site (Adidas Domain) Operation And App Operation

II. Domain And Network Security And User Authentication

III. Global Credential To All Adidas Platforms – User Experience

IV. Sales Of Adidas Products - Online And Off-Line Order

V. Payment Fraud Detection

VI. Product Delivery

VII. Electronic Delivery Tracking

VIII. Business Operational Analytics

IX. Customer Service

X. Personalised Marketing Messages Via Email (Newsletter Sign-Up)

XI. Personalised Marketing Messages Via Email (Via Existing Contract)

XII. Targeted Messages On 3rd-Party Advertising Platforms

XIII. adiClub Membership Administration – Where Applicable

XIV. Private Event Registration

XV. Open Event Registration

XVI. Product Research And Development

XVII. Legal Obligation - Cooperation With Law Enforcement And Regulatory Authorities (Including Courts)

XVIII. Collecting Your Device Information On Our Website Using Cookies, Pixels, Tags, And Similar Technologies (“Cookies Notice”)

XIX. User-Generated Content (UGC) Acquisition From Social Media

XX. Push Notifications (In-App Communication)

PROCESSING

To run the sites that are connected to the adidas domain and the adidas app, fix bugs to make sure you always see the site the way we intended, and monitor compliance with our Terms and Conditions, we screen all traffic to our site and analyse data that is received by our servers.

Use of Cookies/Tags/Pixels: We may collect your personal details for this purpose by using technologies such as cookies, pixels and tags to collect your device information. More information is available in “XVIII. COLLECTING YOUR DEVICE INFORMATION ON OUR WEBSITE USING COOKIES, PIXELS, TAGS, AND SIMILAR TECHNOLOGIES”.

RETENTION PERIOD

Browsing Session

We need your data for as long as you are on the site. We keep it for the duration of your browsing session.

CATEGORIES OF RECIPIENTS

adidas Data Controllers

adidas AG, its Subsidiaries and Affiliates

Site Administration Support Providers

PROCESSING

To protect our domains, detect unusual activities, and prevent security threats and protect our site-visitors from unauthorised accesses (such as hackers), we screen all traffic to our sites, and authenticate user log-in information using tokens to verify the details you provide to us and compare it with other available information, such us the credentials you have provided directly to adidas or other platforms (such as Runtastic (adidas Training or adidas Running) apps or Facebook) or information that is available in the public domain to ensure only “authorised” users have access to our sites.

Use of Cookies/Tags/Pixels: We may collect your personal details for this purpose by using technologies such as cookies, pixels and tags to collect your device information. More information is available in “XVIII. COLLECTING YOUR DEVICE INFORMATION ON OUR WEBSITE USING COOKIES, PIXELS, TAGS, AND SIMILAR TECHNOLOGIES”.

RETENTION PERIOD

Browsing Session

We need your data for as long as you are on the site. We keep it for the duration of your browsing session.

CATEGORIES OF RECIPIENTS

adidas Data Controllers

adidas AG, its Subsidiaries and Affiliates

Site Administration Support Providers

PROCESSING

We know you don’t like to remember usernames and passwords, or having to register multiple times.

To enable our users to log on to all platforms, portals, services, communities and apps operated by or on behalf of adidas (which includes the adidas Running and adidas Training apps and services) (“adidas Platforms”) with one set of log-in credentials (“adidas Log-In”), we store your adidas Log-In in our global authentication platform. When you use your adidas Log-In to enter any adidas Platform, we will use a token to verify your identity from our global authentication platform. This also further ensures our network and domain security.

Use of Cookies/Tags/Pixels: We may collect your personal details for this purpose by using technologies such as cookies, pixels and tags to collect your device information. More information is available in “XVIII. COLLECTING YOUR DEVICE INFORMATION ON OUR WEBSITE USING COOKIES, PIXELS, TAGS, AND SIMILAR TECHNOLOGIES”.

RETENTION PERIOD

Your account duration or Inactivity+25 months

To allow you to sign in with your adidas Log-In on adidas Platforms, we need to maintain your data for as long as you have an account with us, or if you stop using our services without requesting to delete your data, we will keep it for 25 months after your last log in.

CATEGORIES OF RECIPIENTS

adidas Data Controllers

adidas AG, its Subsidiaries and Affiliates

Site Administration Support Providers

PROCESSING

To operate adidas online shop and adidas platforms, to process your online and/or in-app orders, make sure your payment is received, comply with the requirements under our Terms and Conditions (3. Purchase Terms) (for selling you the products) including invoice processing, delivery, personalisation services, exchanges and refunds, click and collect. Your order cannot be completed if our payment fraud detection solutions flag your transaction as suspicious and potentially fraudulent. Please note the payment fraud detection system is an automated decision-making process. It is required to allow us to conclude the contract with you. You have the right to request a human review of this decision, and challenge the decision.

RETENTION PERIOD

Duration of contract and statutory limitation period. We need to keep the information in case of any legal disputes concerning the contract.

CATEGORIES OF RECIPIENTS

adidas Data Controllers

adidas AG, its Subsidiaries and Affiliates

Selling Partners (where applicable)

Manufacturing Providers

Delivery Service Providers

Payment Risk Solution Providers

Payment Processing Providers

IT Cloud Solution Providers

PROCESSING

We combine the purchase information you provide to us with other information we obtain through our third-party payment risk and fraud prevention service providers to ensure any purchases are legitimate, or you do not purchase our products in violation with our terms and conditions. This means depending on the outcome of the analysis of your information, we may reject your order, and decline your payment. This is an automated decision-making process that is required to conclude our sales contract with you.

RETENTION PERIOD

5 years from the transaction date.

CATEGORIES OF RECIPIENTS

adidas Data Controllers

adidas AG, its Subsidiaries and Affiliates

Payment Risk Solution Providers

Payment Processing Providers

IT Cloud Solution Providers

PROCESSING

Once you have successfully placed an order, we use your contact details (home and/or shipping address) and other purchase information to deliver the products you purchased to you.

RETENTION PERIOD

Duration of contract and statutory limitation period. We need to keep the information in case of any legal disputes concerning the contract.

CATEGORIES OF RECIPIENTS

adidas Data Controllers

adidas AG, its Subsidiaries and Affiliates

Delivery Service Providers

IT Cloud Solution Providers

PROCESSING

This is a service provided on request of the consumer by our Delivery Partners.

You have the option to track your delivery using services provided directly by our delivery partners; however, we will only be able to share your information with our delivery partners for this purpose with your consent. The service is hosted on the Delivery Partner’s platform. You should read their Privacy Notice for the processing of your Personal Data for this purpose.

RETENTION PERIOD

As determined by our Delivery Partner.

CATEGORIES OF RECIPIENTS

Delivery Service Providers

RETENTION PERIOD

When using analytics services provided by the vendors identified above, we are required to retain data for the period specified by these vendors. You can find the retention period indicated by the vendors here:

Adobe Analytics: 36 months ( https://marketing.adobe.com/resources /help/en_US/reference /data-retention.html )

Google Analytics: 38 months

( https://support.google.com /analytics/answer /7667196?hl=en)

We need the information for this duration to produce accurate analysis of our business operations.

CATEGORIES OF RECIPIENTS

adidas Data Controllers

adidas AG, its Subsidiaries and Affiliates

Prospective Buyers and Investors

Business Consulting Service Providers

Data Analytics Solution Providers

IT Cloud Solution Providers

PROCESSING

We collect your Personal Data to tell you when the product you like is available upon your request and respond to your questions and concerns through various communications channels we make available to you.

RETENTION PERIOD

10 years from transaction date

CATEGORIES OF RECIPIENTS

Customer Service Provider

adidas Data Controllers

adidas AG, its Subsidiaries and Affiliates

Selling Partners (where applicable)

Delivery Service Providers

Payment Risk Solution Providers

Payment Processing Providers

IT Cloud Solution Providers

PROCESSING

We send you marketing messages that we think you would be interested (“personalised”) to the email address you provide to us because you signed up to our email newsletters or otherwise consented to receiving marketing messages. To send you “personalised” messages, observe your online (and sometimes, where applicable, offline) behaviour, and analyse your behaviour using analytics to best estimate what product lines you might be interested in, and you can benefit from. This requires us to collect various categories of Personal Data from you. We use different analytics tools to understand what your behaviour means in terms of your like and dislike of our various product lines, and to understand the impact (success rates) of the messages delivered to you.

Use of Cookies/Tags/Pixels: We may collect your personal details for this purpose by using technologies such as cookies, pixels and tags to collect your device information. More information is available in “XVIII. COLLECTING YOUR DEVICE INFORMATION ON OUR WEBSITE USING COOKIES, PIXELS, TAGS, AND SIMILAR TECHNOLOGIES”.

RETENTION PERIOD

We retain it for as long as you do not withdraw your consent sending you emails or object to us processing your Personal Data for marketing purposes.

CATEGORIES OF RECIPIENTS

adidas Data Controllers

adidas AG, its Subsidiaries and Affiliates

Email Marketing Support Providers

IT Cloud Solution Providers

PROCESSING

We send you marketing messages that we think you would be interested in (“personalised”) to the email address you provide to us during a purchasing contract. To send you “personalised” messages, observe your online (and sometimes, where applicable, offline) behaviour, and analyse your behaviour using analytics to best estimate what product lines you might be interested in, and you can benefit from. This requires us to collect various categories of Personal Data from you. We use different analytics tools to understand what your behaviour means in terms of your like and dislike of our various product lines, and to understand the impact (success rates) of the messages delivered to you.

Use of Cookies/Tags/Pixels: We may collect your personal details for this purpose by using technologies such as cookies, pixels and tags to collect your device information. More information is available in “XVIII. COLLECTING YOUR DEVICE INFORMATION ON OUR WEBSITE USING COOKIES, PIXELS, TAGS, AND SIMILAR TECHNOLOGIES”.

RETENTION PERIOD

We retain it for as long as you do not object to us processing your Personal Data for marketing purposes, including sending of marketing messages.

CATEGORIES OF RECIPIENTS

adidas Data Controllers

adidas AG, its Subsidiaries and Affiliates

Email Marketing Support Providers

IT Cloud Solution Providers

PROCESSING

We use third-party advertising platforms, such as Facebook, Google, YouTube, Instagram, etc. to send you messages that are targeted at you, based on your behaviour and browsing pattern, at specific times and locations of these platforms to increase the efficiency of our advertising campaigns and to send you individualised marketing messages. We use third-party solutions such as Google Audience and Facebook Custom Audience to help us do a better job at targeting our campaigns and messages for our consumers. Your Personal Data is shared with the third-party advertising platforms, and they will attempt to match your profile in their database to determine the optimal time and place (the page you are browsing) to show you an advertisement from adidas. We also need to analyse necessary information to understand the impact of our campaigns. If you don’t accept that we track you for this purpose, you will still see adidas advertisements on other platforms at random.

You can learn more about how some of our Advertising Partners help us achieve this purpose by visiting their sites:

Google Personalised Advertising: https://support.google.com/ adspolicy/answer/143465?hl=en

Google Advertising Policies: https://support.google.com /adspolicy/answer/6020956

Facebook Lookalike Audiences: https://www.facebook.com /business/help/164749007013531

Facebook Custom Audience Terms: https://www.facebook.com/legal /terms/customaudience

Use of Cookies/Tags/Pixels: We may collect your personal details for this purpose by using technologies such as cookies, pixels and tags to collect your device information. More information is available in “XVIII. COLLECTING YOUR DEVICE INFORMATION ON OUR WEBSITE USING COOKIES, PIXELS, TAGS, AND SIMILAR TECHNOLOGIES”.

RETENTION PERIOD

We retain it for as long as you do not withdraw your consent.

CATEGORIES OF RECIPIENTS

adidas Data Controllers

adidas AG, its Subsidiaries and Affiliates

Advertising Agency Partners

Social Media Platforms

Targeted Marketing Service Providers

IT Cloud Solution Providers

Please note this section applies when you create and register a membership account and become an adiClub member.

adidas collects and uses your adiClub membership Personal Data for the purposes of:

1. Compliance with Membership Terms and Conditions; and

2. Profiling for Personalised Content, Experience, Business & Marketing Analytics and Targeted Marketing Messages

1. Compliance with Membership Terms and Conditions

PROCESSING

When you register and create a membership account, we collect and use your personal data and/or the information specified above to maintain and administer your membership account and comply with the adiClub Terms and Conditions.

This includes the following:

a. collecting, storing, and processing the Personal Data you provided in the registration form to create a membership profile and account for you;

b. assigning a membership ID to your profile and account and using the membership ID along with other Identity Information you provided to identify you;

c. enabling your membership account details to be used as your adidas “Global Credential” for accessing all adidas brand domains and apps worldwide;

d. displaying your current membership status, including your profile information, level, points, and other relevant information in all adidas brand domains and apps worldwide;

e. sending you membership administration messages via email including messages about your account status (level up and/or down), management (rewards unlocked for you and how to retrieve them) and maintenance requests (for example, password reset);

f. sending you membership administration messages via push notification in adidas apps about your account status (level up and/or down), and management (rewards unlocked for you) and maintenance requests (for example, password reset)

-you can switch off push notifications at any time using “Settings” in your mobile devices. However, if you switch off push notifications, we may need to contact you via emails for important messages relating to your membership;

g. verifying and using your profile and account information for the purpose of participating in member-exclusive challenges and/or promotions - this will also include sharing your contact details with partners who support us with administering the promotions especially in the case where you have won a prize;

h. calculating your club points to provide you with rewards - this will include sharing your data with partners who support us with administering the reward, where the reward may be provided via a partner or exclusively by the partner;

i. updating your point status once you have used points to redeem awards;

j. keeping track of your redemption activity and history;

k. providing you with access to special offers and promotions;

l. sending you invitations to exclusive events;

m. allowing you access to limited edition products;

n. providing you with adidas Running and adidas Training basic features (subject to change) as part of membership offering;

o. providing you with access to adidas Running and adidas Training basic features (subject to change) as part of adiClub membership;

p. providing you with access to adidas Running and adidas Training premium features offered as a reward of membership in accordance with membership Terms and Conditions;

q. providing you with access to adidas Running and adidas Training premium features via a subscription purchased from runtastic GmbH;

r. storing your shipping address and payment details to shorten check-out time online and in the app;

s. storing your complete order history so that you can access it at any time;

t. allowing you to track your order delivery from your account;

u. accessing your membership profile and providing you with services and support – including updating your account information following your instructions, providing you with support and answering your queries about your account, your purchases, technical support for using our apps, supporting you with your privacy queries - when you contact adidas through various communication channels using your membership ID and profile; and

v. storing all Personal Data we collect from you directly or indirectly that have been identified via your membership ID or email with your membership profile, including details you may have shared at an adidas brand retail store and/or outlet and participating adidas franchised stores for the purposes of calculating points and levels to enable all the points listed above.

RETENTION PERIOD

Duration of contract and statutory limitation period. We need to keep the information in case of any legal disputes concerning the contract.

CATEGORIES OF RECIPIENTS

adidas Data Controllers

adidas AG, its Subsidiaries and Affiliates

Prospective Buyers and Investors

Business Consulting Service Providers

Data Analytics Solution Providers

adiClub Partners

2. Profiling for Personalised Content, Experience, Business & Marketing Analytics and Targeted Marketing Messages

PROCESSING

We use your Personal Data to create personalised content for you and to make sure we interact with you in a manner that you are more likely to keep and maintain your membership, respond to our targeted marketing messages, and to continue to purchase adidas products and use adidas platforms.

This includes the following:

a. sending you personalised email messages about how to gain Club points or retain your level including promotional messages about adidas products, services and lifestyle recommendations - you can unsubscribe from this message at any time by using the “Unsubscribe” function in the message;

b. sending you push notifications via adidas apps about how to gain Club points or retain your level including promotional messages about adidas products, services, and fitness and lifestyle recommendations - you can switch off push notifications at any time using “Settings” in your mobile devices. However, you may still receive email messages from which you can unsubscribe directly in the email messages;

c. tracking and monitoring your online browsing behaviour by using certain tracking technologies (e.g. Cookies, Pixels, Tags) on the website and in our apps;

d. storing all Personal Data we collect from you directly or indirectly that have been identified via your membership ID or email with your membership profile, including details you may have shared at an adidas brand retail store and/or outlet and participating adidas franchised stores for the purposes of using them to enrich your membership profile as detailed below; and

e. analysing and assessing all Personal Data we collect from you directly or indirectly that have been identified via your membership ID or email with your membership profile, including details you may have shared at an adidas brand retail store and outlet and participating adidas franchised stores. More specifically, this includes using your Personal Data in the following ways:

· PROFILING (AUDIENCE MANAGEMENT)

We create a profile about you by consolidating all the information you provided to us directly or indirectly. This allows us to establish a personalised interaction with you that is based on our past interaction, and other information we can use to infer your likes and dislikes. We use audience management technologies to ensure the right messages and information reach you at the right moment through the right channel. This includes sending you marketing messages of deals and products or addressing you across digital media through ads on adidas brand platforms.

· MARKETING ANALYTICS

We use your data for different analytical purposes to better understand: a) how you browse and use our platforms; b) which products you are interested in; c) which features of our products and platforms you like; d) the quality of our services including customer service, marketing and advertising campaigns addressed to you, and your reaction to these services; e) our product and website design; and f) whether overall user experience worked for you or not. We use this analysis to improve the relevance of our marketing communication to you and the quality of our personalisation experience across our channels and platforms.

· DATA ENRICHMENT

We create a single, unified consumer profile of you by matching all Personal Data from which you can be identified. This includes Personal Data we collected directly or indirectly from you across digital media or offline, the feedback you provide to us, your interaction and communication with us through our various platforms and communication channels.

· IMPROVING DATA MODELS

We use data science and your profile and Personal Data to create data models that can help us improve the logic in our analytics activities that give us more insight about your comments and feedback, your interactions, preference and needs in our products and services. We will compare the data model we created using your profile with other similar consumer profiles and categories to further predict and analyse your preference.

RETENTION PERIOD

Duration of contract and statutory limitation period. We need to keep the information in case of any legal disputes concerning the contract.

CATEGORIES OF RECIPIENTS

adidas Data Controllers

adidas AG, its Subsidiaries and Affiliates

Prospective Buyers and Investors

Business Consulting Service Providers

Data Analytics Solution Providers

adiClub Partners

PROCESSING

When you sign up for an event we organise that have limited spots, we use the Personal Data you provide to reserve a spot for you. Your Personal Data will be used according to the Terms and Conditions associated with the event.

RETENTION PERIOD

Duration of the event and statutory limitation period in case of any disputes.

CATEGORIES OF RECIPIENTS

adidas entity organizing the event.

adidas Data Controllers

adidas AG, its Subsidiaries and Affiliates

Event Partners (where applicable)

IT Cloud Solution Providers (where applicable)

PROCESSING

We often also organize events that are open to everyone. We use the Personal Data you provide to keep you inform of the events you are interested in.

RETENTION PERIOD

For the duration of the event + 36 months if the data from a particular event is used for BUSINESS OPERATIONAL ANALYTICS purpose.

CATEGORIES OF RECIPIENTS

adidas entity organizing the event.

adidas Data Controllers

adidas AG, its Subsidiaries and Affiliates

Event Partners (where applicable)

IT Cloud Solution Providers (where applicable)

PROCESSING

We conduct analysis to research improve our products and services. This includes asking you questions in surveys, asking you for feedback, asking you to test our products and provide us with a review, asking other service providers to conduct market and product research for us, try new technologies in our product that might collect Personal Data to stay ahead of the competition. We retain this information based on our “legitimate interest”, so by participating in any product review or survey, you agree that this is our legitimate interest. Where you wish to object to this legitimate interest, we will anonymise your information, so it is no longer Personal Data.

RETENTION PERIOD

The duration of the project and statutory retention period stated to protect our IP rights.

CATEGORIES OF RECIPIENTS

adidas Data Controllers

adidas AG, its Subsidiaries and Affiliates

Prospective Buyers and Investors

Business Consulting Service Providers

Data Analytics Solution Providers

Manufacturing Providers

IT Cloud Solution Providers

PROCESSING

When we are legally required to provide your Personal Data for national and public security reasons, crime prevention, investigation and prosecution, anti-money laundering, judicial proceedings, protection of other individuals’ rights and freedoms, and enforcement of civil claims, we will provide information as requested by the authorities or parties once we are satisfied that the request is mandated by law. We may not be able to notify you if it is against the law to do so.

RETENTION PERIOD

For as long as required by law.

CATEGORIES OF RECIPIENTS

adidas Data Controllers

adidas AG, its Subsidiaries and Affiliates

Local and national government authorities, including tax authorities

Local and national law enforcement agencies

Local and national judiciary

When you visit the adidas site, we store data collectors such as cookies, tags, pixels, tag containers, beacons, among others, in your browser to obtain certain information about your current browsing session. These technologies are often referred to as “Cookies” collectively by other websites. Cookies also enable our website to remember your actions and preferences (such as login, language, font size and other display preferences) over a period, so you don’t have to keep re-entering them whenever you come back to the site or browse from one page to another. We install cookies, pixels, tags and other technologies on your browser to collect your device information and track your activities on ours and other platforms and for different purposes. Please review the information below to understand how we use different types of Cookies to fulfil different purposes.

PROCESSING

“REQUIRED” – site functionality and business operation.

We use “Required Cookies” to operate our site. This includes storing a unique identifier to manage and identify you as a unique visitor to our site, to provide a consistent and accurate service to you. This includes making sure that we remember the products you have placed in your cart, or your language preferences. These Cookies are stored for the duration of your browsing session. Without these Cookies, you will not be able to view our site properly.

PROCESSING

“FUNCTIONAL” – website improvement and performance

We use “Functional Cookies” to continuously improve our website performance. This includes using the data we collected from you to do the following:

Web analytics —Based on your browsing behaviour, we will analyse the data to improve the functionality and design of our site.

Ad response rates— Based on how you come to our site, we will measure our ad response rates by analysing our ad click-through rates to improve the effectiveness of advertising purchased on a site external to ours.

Affiliate tracking— We need to let our affiliate marketing partners, or service providers have certain information if you came to our site, and purchased products, through a visit to theirs. This is required as we may need to provide them a fee for such services. For this purpose, we will share information about your visit, including the products you have purchased.

Error management— We measure errors presented on a website, to make sure we fix bugs or any issues promptly.

Testing designs— We need to use A/B testing or multivariate testing, to ensure a consistent look and feel is maintained for the user of the site in the current and subsequent sessions.

PROCESSING

“MARKETING”

We use “Marketing Cookies” provided by our advertising partners to make sure our advertising messages are shown to you at the right time and the right place. These Cookies are persistent but time-limited cookies. These Cookies contain a unique key to distinguish individual users’ browsing habits. We also use these Cookies to limit the number of times a user sees a particular ad on a website and to measure the effectiveness of a particular campaign. The identifier stored by these Cookies are provided by our partners. We cannot use the same identifier in our own systems. We also use these cookies to serve ads that are relevant to your immediate geo-location, for example to provide you with the nearest store where the product you are browsing may be available.

RETENTION PERIOD

The cookies, pixels, tags, and other similar technologies used to collect your device information and browsing behaviour information are stored in your browser for the session or for as long as you do not clear your browser cookie setting.

The data we obtained through the cookies related to other purposes will be stored for the duration of that purpose.

CATEGORIES OF RECIPIENTS

adidas Data Controllers

adidas AG, its Subsidiaries and Affiliates

Site Administration Support Providers

Business Consulting Service Providers

Data Analytics Solution Providers

Advertising Agency Partners

Social Media Platforms

Targeted Marketing Service Providers

You can change your browser settings to delete or prevent certain cookies from being stored on your computer or mobile device without your explicit consent. The ‘help’ section in your browser should provide information on how to manage your cookie settings.

Find out how this works for your browser here:

Internet Explorer: https://support.microsoft .com/help/17442 /windows-internet-explorer- delete-manage-cookies

Mozilla Firefox: http://support.mozilla.com/ en-US/kb/Cookies

Google Chrome: http://www.google.com/support/chrome /bin/answer.py?hl=en& answer=95647

Safari: http://support.apple. com/kb/PH5042

Opera: http://www.opera.com/browser/ tutorials/security/privacy/

Adobe (flash cookies): http://www.adobe.com/privacy/ policies/flash-player.html

Google Chrome App: https://support.google. com/accounts/answer/ 61416?co=GENIE.Platform% 3DAndroid&hl=en

These websites will also help you understand more about how Cookie-based advertising works and how you can manage your Cookie Settings:

http://www.aboutads .info/choices

http://www.youron linechoices.eu/

Network Advertising Initiative opt-out page: http://optout.network advertising.org/?c=1

You can learn more about the laws governing the use of “Cookies” here: http://ec.europa.eu/ipg/ basics/legal/cookies /index_en.htm

XIX. USER-GENERATED CONTENT (UGC) ACQUISITION FROM SOCIAL MEDIA

PROCESSING

We invite you to provide your images to us via social media platforms by following specific instructions such as “#yesadidas”. We will be using the images you provide for our campaign communications. We will obtain rights to your image through a licence agreement in the form of our terms and conditions. By submitting your images via social media platforms to us, you will agree for us to use your images as described in the licence agreement.

RETENTION PERIOD

Duration of licence agreement and statutory limitation period in case of any disputes.

CATEGORIES OF RECIPIENTS

adidas Data Controllers

adidas AG, its Subsidiaries and Affiliates

Event Partners (where applicable)

UGC Support Partners

Advertising Agency Partners

Social Media Platforms

IT Cloud Solution Providers (where applicable)

XX. PUSH NOTIFICATIONS (IN-APP COMMUNICATION)

PROCESSING

When you use the adidas app, we use push notifications in this app to communicate with you concerning the purposes stated in this Policy. This includes information that relates to purposes based on the Performance of Contract (such as your purchase). You can switch off push notifications at any time using “Settings” in your mobile devices. However, if you switch off push notifications, we may need to contact you via emails for important messages relating to your purchase.

RETENTION PERIOD

For as long as you use the app and not switched Push Notification off.

CATEGORIES OF RECIPIENTS

adidas Data Controllers

adidas AG, its Subsidiaries and Affiliates

adidas Customer Service

ASK CUSTOMER SERVICE: https://www.adidas.com.vn/help here

adidas Privacy Team and the Data Protection Officer

+ (84) (0) 83 915 7007

DPO_VN@adidas.com

Adidas Vietnam Company Limited

8F Deutsches Haus, 33 Le Duan

Ben Nghe Ward, District 1

Ho Chi Minh City, Vietnam

Get a copy of your Personal Data

You have the right to obtain a copy of your Personal Data, if it does not have negative effect on other people.

Contact Customer Service for support.

Reason: Privacy and Data Handling.

Subject: A Copy of My Personal Data.

Access to information about your Personal Data

You have the right to know whether or not we use your Personal Data, as well as the following information: a) why we have your Personal Data; b) what categories of data we have; c) what we do with your Personal Data; d) who has access to your Personal Data (and where they are); e) where your Personal Data might be transferred to; f) how long we are keeping your Personal Data; g) if you didn’t provide your Personal Data directly to us, how did we get them; h) your rights under applicable laws and the possibility to restrict processing; and i) if we use your Personal Data for any automated decision-making; and j) in some cases, you have the right to know how our automated decision-making works, if the decision significantly affects you.

Please review the adidas Privacy Policy.

If you have any questions about the Privacy Policy, please contact the adidas Privacy Team.

Make sure your Personal Data are correct

You have the right to make sure we are using the accurate details about you.

Log in to your account and make the corrections yourself; or

Contact Customer Service for support.

Reason: Privacy and Data Handling.

Delete your Personal Data

You have the right to ask us to delete your Personal Data if: a) we no longer need it for a specific purpose, for example, a contract or a legal requirement; or b) you withdraw the consent you provided if we asked for your consent when we collected your Personal Data; or c) if you object to our use of your Personal Data based on legitimate interests we have identified, including direct marketing activities, unless we can demonstrate the compelling need of the legitimate interests.

Log in to your account and make the corrections yourself; or

Contact Customer Service for support.

Reason: Privacy and Data Handling.

Restrict us from sharing your Personal Data

Your Personal Data is only shared to any third party with your consent.

You have the option to restrict us from sharing your Personal Data to any third party.

Restrict how we use your Personal Data

You have the right to stop us from doing certain things to your Personal Data when: a) you don’t think we are using the right Personal Data; b) you don't want us to delete your Personal Data, but you also don't think we are complying with the law; c) you want to make a legal complaint against us, but we want to delete the data; or d) you challenge our explanation of our use based on a "legitimate interest". When you successfully restrict how we use your Personal Data, we will only use your Personal Data with your consent, or unless it is required by law.

Log in to your account and make the corrections yourself; or

Contact Customer Service for support.

Reason: Privacy and Data Handling.

Subject: Privacy – Restrict Processing

Obtain a portable file so you can share it with another company

You have the right to obtain a portable file that contains the Personal Data you provided to us where the legal basis is either consent or the performance of contract. The file will provide you with the Personal Data you actively and knowingly provided to us, including data passively obtained by us when you use our service or products.

Please log-in to your account, go to “Personal Information” and click on “Your Personal Data”. You will receive an encrypted .json file to the designated email address.

Withdraw your consent

When we use your Personal Data based on your consent, you have the right to change your mind and withdraw your consent at any time.

Unsubscribe from our Newsletters:

Click ‘Unsubscribe’ at the bottom of the newsletter or marketing email that you want to unsubscribe from; or update your communication preferences in your account if you have one.

If there are any technical issues:

Contact Customer Service for support.

Reason: Privacy and Data Handling.

Subject: Unsubscribe Me from Emails

Withdrawing other consent:

Contact us for support.

Subject: Privacy – Withdraw My Consent

Challenge the decision generated by our automated decision-making process

When we use automated decision-making tools or processes that lead to an outcome which produces a legal effect (such as Payment Fraud Detection), you have the right to understand the logic involved, the significance and possible consequences of this process. You also have the right to request human intervention, especially when this is used to conclude a contract with us. You can challenge our decision by expressing your opinion.

Contact Customer Service for support.

Reason: Privacy and Data Handling.

Subject: My Credit Card is declined – automated processing?

File a complaint with your local data protection supervisory authority

If you are not happy with how we have handled your Personal Data, or how we have responded to your rights provided here, you have the right to make a complaint against us with your local data protection supervisory authority.

Contact a data protection supervisory authority

COMPANY

SERVICE

adidas International Marketing B.V.

Webshop operations & Marketing Services

Demandware Inc.| USA

Website Hosting

Adyen | Netherlands

Payment Processes

InfoSys Technologies Ltd. | India, EPAM | Belarus

Website Development

Adobe Analytics | Ireland, Google Analytics | USA

Web Analytics

Sprinklr | USA, Olapic Inc. | USA

Social Media Analytics

Flurry | USA, Apps Flyer | Israel

Mobile App Analytics

Medallia Inc. | USA, Qualtrics LLC | USA

Net Promoter Score

act.3 | Germany, cip Trademarketing GmbH | Germany

Event Management

Neolane Ltd. | France

Marketing

Batterii LLC | USA

Consumer Insights

TBWA Worldwide Inc. | USA, Media Monk Netherlands, IRIS | Australia

CRM Agencies

Olapic, Inc. | USA

Influencer Marketing

Adidas AG and adidas affiliates | globally

Consumer Relationship Management

IProspect | SEA

Media Agency

Teleperformance | Germany

Customer Service

DHL | Germany

Product Delivery

Feedzai | Germany

Fraud Prevention

PayPal | USA

Payment Service

Apple Pay, Google Pay | USA

Mobile Payment

Facebook (WhatsApp, Instagram) | USA

Social Media Interaction

Twitter | USA

Social Media Interaction

Google | USA

Social Media Interaction

Runtastic | Austria

Health and Fitness Community

Google Analytics | USA

Analytics

Adobe Analytics | USA

Analytics

Anatwine Limited | UK

Consumer Experience

MediaCom | UK

Advertising Partner

Salesforce

CRM Software | Data Analytics

Wunderman

Email Marketing Services

DHL Vietnam

Delivery

Tech Mahindra | Malaysia

Customer SERVICE