INFORMATION PURSUANT TO THE RULES ON THE PROTECTION OF PERSONAL DATA.

This page provides information on how Diadora S.p.A., company with a sole shareholder, DIADORA RETAIL SRL and DIANA E-COMMERCE CORPORATION SRL manage the processing of personal data of Users who register on this platform and on the www.diadora.com website (hereinafter the “Website”).

This information integrates the security policy of the website, in order to illustrate to the User how Diadora, Diadora Retail and Diana will process the data entered in this registration form to the Website: we therefore invite you to read the privacy policy.

https://www.diadora.com/en/jp/customer_service/privacy_%26_security/privacy-policy.html

Data controller

DIANA E-COMMERCE CORPORATION SRL, with registered office in Torreglia (PD), via San Daniele n. 137/139, 35038, VAT. 05097740285, e-mail privacy@dianacorp.com (hereinafter “Diana”) and Diadora SPA, Company with sole shareholder, with registered office in Via Montello, 80, Caerano di San Marco - Treviso (hereinafter “Diadora”) are the joint data controllers for the processing of personal data for all activities related to the sale of the products offered on the Website, such as order processing, delivery of the product and payment management, any returned products and after-sales service. You may find out more on the agreement between Diana and Diadora, in accordance with Article 26 GDPR, by contacting us via email at: privacy@diadora.com or privacy@dianacorp.com.

DIADORA RETAIL SRL, Company with a sole shareholder subject to coordination and control of Diadora S.p.A., with registered office in Via Montello, 80, Caerano di San Marco - Treviso (hereinafter “Diadora Retail“) and Diadora are the joint data controllers for all activities related to the sale of products offered in retail stores, such as order processing, delivery of the product and management of payment, any products returned and after-sales service. You can find out more on the agreement between Diadora Retail and Diadora in accordance with Article 26 GDPR by contacting us at the following email address: privacy@diadora.com.

Diadora is also an independent data controller for the purposes of managing your registration to the Website, marketing and profiling.

Data Protection Officer (DPO)

Diadora and Diadora Retail have appointed a Data Protection Officer (DPO), who the data subject may contact by writing to the following address: dpo@diadora.com.

Diana has appointed a Data Protection Officer (DPO), who the data subject may contact by writing to the following address: privacy@dianacorp.com.

Purpose and legal basis of processing

Your personal data will be processed by Diadora for the purposes set out below:

A. without express consent, allow you to register on the Website and access related services; in relation to these purposes, your consent is not required because the processing of data is necessary to provide the Services requested or to fulfil a legal obligation;

B. only with your specific and distinct consent, to make known to you, by sending you advertising and information material by means of periodic e-mails and/or sms, information regarding the products and services of Diadora and any other initiatives, commercial or otherwise, initiated by it (hereinafter “Marketing”);

C. only with your consent, analysing your tastes, preferences, habits and choices in order to send you personalised commercial communications based on the commercial and behavioural profile created  (hereinafter “Profiling”). The processing of your personal data for profiling purposes will occur through an automated decision making process which, following the cross-referencing of data, will create your commercial and behavioural profile.

Your personal data will be processed by Diadora and Diadora Retail for the purposes set out below:

D. without express consent, for the conclusion and performance of the contract of sale of products offered in retail stores, or the management and processing of the order, the communication of any circumstances relating to the order, the delivery of the product, the management of payments and any returned products and after-sales service, as well as for the performance of legal obligations, in accordance with civil, fiscal and accounting laws. The legal basis for this treatment is based on the fulfilment of the sales contract to which you are a party and of legal obligations and, therefore, the related processing by Diadora Retail does not require your express consent.

Your personal data will be processed by Diadora and Diana for the purposes set out below:

E. without express consent, for the conclusion and performance of the contract of sale of the products offered on the Website, i.e. the management and processing of the order, the communication of any circumstances relating to the order, the delivery of the product, the management of payments and any returned products and after-sales service, as well as for the performance of legal obligations, in accordance with civil, fiscal and accounting regulations laws. The legal basis for this treatment is based on the fulfilment of the sales contract to which you are a party and legal obligations and, therefore, the related processing by Diana and Diadora does not require your express consent.

Your personal data may also be processed by Diadora, Diadora Retail and Diana to defend or enforce a right and/or for the prevention and detection of any fraud and other offences or unlawful acts. The legal basis for such processing is the fulfilment of legal and/or contractual obligations and the legitimate interest of Diadora, Diadora Retail and Diana.

Data storage period

Your personal data will be processed for the time strictly necessary to achieve the above purposes, after which they will be erased or made anonymous and in particular:

• for the purposes of registration to the Website referred to in point A), Diadora will automatically erase them if you do not make an online purchase of the products within 24 months of the last purchase;
• for the Profiling and Marketing purposes referred to in points C) and B), your personal data will be processed by Diadora respectively for 12 months and 24 months, unless you first revoke your consent to the processing;
• for the purposes of selling the products in the retail stores referred to in point D), your personal data will be processed by Diadora and Diadora Retail for the entire duration of the contractual relationship and, subsequently, for a period not exceeding 10 years from the time of termination of the relationship in accordance with legal obligations in civil, fiscal and accounting matters;
• for the purposes of selling the products on the Website referred to in point E), your personal data will be processed by Diadora and Diana for the entire duration of the contractual relationship and, subsequently, for a period not exceeding 10 years from the time of termination of the relationship in accordance with legal obligations in civil, fiscal and accounting matters.

In any case, the data collected may be kept by Diadora, Diadora Retail and Diana for longer periods of time than those indicated above to defend or enforce a right and/or for the prevention and detection of any fraud and other offences or unlawful acts within the terms permitted by applicable law.

Nature of data provision and consequences in case of refusal

The provision of data in the fields marked with an asterisk (*) for the purposes referred to in points A), D) and E) is necessary to register on the Website and proceed with any purchase orders of the products, where the failure to provide the required data makes it impossible to obtain registration on the Website and the conclusion and performance of the contract of sale of the products ordered. On the other hand, the provision of data in fields not marked with an asterisk, although useful to facilitate relations with Diana, Diadora Retail and Diadora, is optional and the failure to provide them does not affect the completion of the procedure for registration on the Website and the processing of any purchase orders.

The provision of data for the purposes referred to in point B) is optional. You may therefore decide not to communicate any data or subsequently deny the possibility of processing data already provided: in this case, you may not receive advertising and information material, information regarding the Diadora’s products and services and any further initiatives, commercial or otherwise, initiated by it, but you may still register on the platform and the Website and proceed with the performance of purchase orders for the products referred to in points A), D) and E).

Providing data for the purposes referred to in point C) is optional. You may therefore decide not to provide any data or later deny the processing data already provided: in this case, Diadora will not be able to analyse your tastes, preferences, habits and behaviour in order to send you personalised commercial communications based on the commercial and behavioural profile created. However, you will still be able to register with the platform and the Website and continue placing purchase orders for the products referred to in points A), D) and E).

Scope of data disclosure and categories of recipients

Only for the purposes specified above, all data collected and processed may be disclosed by Diadora, Diadora Retail and Diana to internal persons authorised to process data by virtue of their duties, as well as to the following categories of external persons as independent controllers or external processors:

• IT service providers, such as direct marketing, internet service and cloud computing;
• persons who perform logistics, warehousing, promotion, supply, sale and delivery of products and services of Diadora, Diadora Retail and Diana;
• persons who perform customer service activities;
• professional firms and other persons who provide assistance, consultancy and services regarding, for example, legal, tax, accounting, financial, technical-organisation, data processing and disclosure;
• persons that provide banking, financial, insurance and debt collection services;
• subsidiaries, parent companies, investee companies or affiliates;
• public authorities and supervisory and control bodies;
• third-party companies in the context of acquisitions or disposals of the company or a business unit.

Should these recipients process data on behalf of Diadora, Diadora Retail and Diana, they shall be appointed data processors under a contract or other legal instrument.

The updated list of Recipients is available upon specific request to Diana, Diadora Retail and Diadora of the processing through the methods indicated in the paragraph “Rights of data subjects” below.

No data collected on the Website is subject to dissemination.

Data transfer to a third country and/or an international organisation

Your personal data may be transferred, for the purposes for which they are collected, to the United States of America (USA) which is a country outside the European Union.

The transfer of personal data to entities located in the USA will take place exclusively by virtue of the signing with the non-EU recipient of the standard contractual clauses adopted or approved by the European Union Commission (Article 46(2)(c) and (d) of the GDPR) or in any case to entities listed in the Privacy Shield, a self-certification mechanism for companies established in the USA that intend to receive personal data from the European Union in accordance with the Implementing Decision (EU) 2016/1250 adopted by the European Commission on July 12, 2016.

You can obtain a copy of such data sending a request to Diana, Diadora Retail and Diadora, as specified under paragraph “Data subjects’ rights” below.

Minors

The Website and the related services are not dedicated to minors and, therefore, Diana, Diadora Retail and Diadora do not knowingly collect personal online data of persons aged under 18.

Data subjects’ Rights

Data subjects’ have the right to ask Diana, Diadora and Diadora Retail for access to their personal data and to rectify them if inaccurate, to erase them or limit their processing if the conditions are met, to object to their processing for legitimate interests pursued by Diana, Diadora and Diadora Retail, and to obtain portability of the data provided personally only if subject to automated processing based on consent or contract. Data subjects have the right to withdraw the consent provided for the processing purposes for which it is necessary, without prejudice to the lawfulness of the processing performed until the withdrawal.

To exercise these rights, you may contact us at the following address):

• via postal service: Diadora S.p.A., Caerano di San Marco (TV), Via Montello n.80, or
• via e-mail: privacy@diadora.com

You may also exercise these rights against either Joint Data Controller at the addresses indicated above.

The data subject, if registered on the Website, may also exercise the right to revoke any consent given by accessing the “My account” on the Website or, if registered with the marketing service, through the link contained in each communication received by Diadora.

The data subject also has the right to lodge a complaint with the competent supervisory authority, the Italian Data Protection Authority  (www.garanteprivacy.it).