PRIVACY STATEMENT

PRIVACY NOTICE - Online Portal and Digital Tool Box

This notice describes how adidas collects, uses, protects, keeps, shares and deletes (“process” and “processing”) your Personal Data while you visit this website, and when you provide your Personal Data to adidas. This notice also provides you information about your rights under applicable data protection laws, and how we can assist you with those rights.

Where we use adidas, we or us in this notice it means adidas AG (Adi-Dassler-Strasse 1, Herzogenaurach, Germany).

“Personal Data” in this notice means any information relating to you, which allows us to identify you directly or indirectly.

What Personal Data are we collecting from you?

To create your account, we use the information that you provided to us:

As a service to you, we create and maintain your user account. For this, we use the information you provide us with. This information is:

• Email address

• name

• country

• language

During your interaction with this website, we may collect the following Personal Data from you:

• the date and time of your visit

• average time of your session/your stay on our sites

• the referral URL (the site from which you navigated)

• links that you have clicked

• content that you downloaded

• information about the device and browser (browser type and version, operating system, etc).

When do we collect your Personal Data?

We collect your Personal Data when you access and use this website.

Why are we processing your Personal Data?

We may collect information about the websites that you visit and how you use them. A visit to one of our websites results in data that is sent from your browser to our servers. This information makes it possible to optimize our services and improve your experience on our websites.

With this website, we want to create a way to communicate with you and to provide you with a single point of access to all B2B ordering functions for our wholesale customers. In connection with this, we especially process your Personal Data to get in contact with you, to grant you access to this website and to provide you with smoothly working functionalities.

In particular, we process your Personal Data for the following purposes:

Enabling us to provide you with access to this website, to communicate with you and optimizing our services as well as the user experience

We process the Personal Data you provide us with, to create your account and for authentication purposes when you access this website. We will also use your Personal Date to provide services you have requested and to respond to any comments or complaints you may send us.

Additionally, we want to ensure a smooth and optimized functionality of this website. To guarantee a smooth experience, we may use your e-mail address in order to inform you about system outages or other important information related to the business relationship between your company and the adidas Group.

Legal Compliance & Legitimate Business Interests:

Your Personal Data is also processed in compliance with applicable laws and protection of adidas’ legitimate business interests and legal rights, including, but not limited to, use in connection with legal claims, compliance, regulatory, investigative purposes (including disclosure of such information in connection with legal process or litigation).

What is the legal basis for our processing of your data?

Your Personal Data is processed by us in compliance with Art. 6 GDPR. We process your Personal Data predominantly to enable us to provide you with an optimized single point of access to all B2B ordering functions, to communicate with you and to handle our relationship with you. Under certain circumstances, we may process your Personal Data for compliance reasons based on applicable laws or legitimate business interests as further set out in the section “Legal Compliance & Legitimate Business Interests”.

Who will we share your Personal Data with?

Your Personal Data may be shared with adidas affiliates and carefully selected service providers that we work with such as hosting providers.

We share your Personal Data with our hosting provider

We may also share your Personal Data with the following types of entities:

• Authorities and Law Enforcement: government authorities and/or law enforcement officials if required for the purposes identified in this notice, if mandated by law or if required for the legal protection of our legitimate interests in compliance with applicable laws;

• Prospective Purchaser’s adviser: in the event that adidas is sold or integrated with another business, your Personal Data will be disclosed to our advisers and any prospective purchaser’s advisers, and to the new owners of the business.

Where will we send your Personal Data and how do we secure it?

Where we share your Personal Data with an adidas affiliate or a vendor located in a country outside the EU/EEA that has not been deemed to provide an adequate level of protection of Personal Data by the EU Commission, we will implement measures to comply with the requirements set out by the EU General Data Protection Regulation:

• we will implement EU Commission approved standard contractual clauses; or

• we will ensure the affiliate or vendor has a valid Privacy Shield certification (USA); or

• we will conduct due diligence on the vendor's Processor Binding Corporate Rules

to guarantee your Personal Data rights under applicable laws.

What rights do you have in relation to your Personal Data?

You have the right to request from adidas the following:

• Access: you can ask adidas for a copy of your Personal Data; unless otherwise specified, we would provide a copy of your Personal Data in a commonly used electronic form;

• Accuracy: you can ask adidas to correct and amend the information we have about you for the purposes of creating your account;

• Deletion: if you decide to no longer use this website, you can ask us to delete your Personal Data from our files permanently;

• Restriction: you can ask adidas to not process your Personal Data if you think our information about you is not accurate, or you contest our legal and legitimate business interests in processing your Personal Data;

• Transfer Your Personal Data: you can also ask adidas to transfer your Personal Data to other organisations.

In order to assist you with any of the requests listed above, we will need to confirm your identity; you will be asked to provide additional information before we can carry out any of your requests.

Please note that some of the rights mentioned above are also subject to restrictions, such as a legal obligation, public interest (national, public security, crime prevention), and defence of a legal claim. Where your request has been rejected subject to an applicable restriction, we will inform you and provide you with relevant information.

How long are we keeping your Personal Data?

User account:

We will keep the Personal Data you provided for the creation and management of a user account for the duration of our relationship with you or until the deletion of the user account is requested by you or the wholesale customer. Also, if your user account is inactive for more than one year, we may delete your user account.

• Legal Compliance & Legitimate Business Interests:

• We will also keep your Personal Data for legal compliance purposes for the periods specified by applicable laws; and

• To protect our business interests against legal claims, and to administer our business, we may also keep your Personal Data for an appropriate period of time after you cease to be [a user of this website.

How do we protect your Personal Data?

We have appropriate organisational and contractual safeguards in place to secure your Personal Data and protect your Personal Data Rights. We also have data security measures in place to protect your Personal Data against loss, falsification, or unauthorised access by third-parties. While we endeavour to keep your Personal Data safe, transmission of information via the internet brings inevitable risks to your Personal Data. We cannot guarantee the security of your Personal Data when you transmit it to us/our service providers via website or email.

Any transmission is at your own risk. Once we have received your Personal Data we will use strict procedures and security features to prevent unauthorized access.

Which Cookies do we use?

We use cookies on our website. Cookies are small text files sent by a web server to your web browser and saved locally on your computer. The cookie allows the server to uniquely identify the browser on each page. Cookies do not cause any harm to your computer and do not contain viruses.

We use the following categories of cookies on our website:

Category 1: Strictly Necessary Cookies

These cookies are essential in order to enable you to move around the website and use its features. Without these cookies, services you have asked for such as remembering your selections or login details cannot be provided.

We use the following strictly necessary cookies:

• Cookie name: authentication Cookie; Cookie description: This cookie allows us to verify the entered user credentials and grant you access to the website.

• Cookie name: Website identification Cookie; Cookie description: This cookie identifies which subsites of the websites you want to visit and enables us to redirect you accordingly.

• Cookie name: Application identification Cookie; Cookie description: This cookie lets us know that you would like to visit this website and allows us to grant you access for all subsites.

Strictly necessary cookies will be deleted right after the end of the session.

Category 2: Performance Cookies

These cookies collect information on how people use our website. Examples would be the Google Analytics cookies.

This website uses Google Analytics, a web analytics service provided by Google, Inc. (“Google”). Google Analytics uses “cookies”, which are text files placed on your computer, to help the website analyse how users use the site. The information generated by the cookie about your use of the website will be transmitted to and stored by Google on servers in the United States. In case IP-anonymization is activated on this website, your IP address will be truncated within the area of Member States of the European Union or other parties to the Agreement on the European Economic Area. Only in exceptional cases the whole IP address will be first transferred to a Google server in the USA and truncated there. Google will use this information on behalf of the operator of this website for the purpose of evaluating your use of the website, compiling reports on website activity for website operators and providing them other services relating to website activity and internet usage. The IP-address that your Browser conveys within the scope of Google Analytics will not be associated with any other data held by Google. You may refuse the use of cookies by selecting the appropriate settings on your browser, however please note that if you do this you may not be able to use the full functionality of this website. You can also opt-out from being tracked by Google Analytics by clicking on the toggle button.

Category 3: Functionality Cookies

These cookies remember choices you make such as the country you visit our website from or language. These can then be used to provide you with an experience more appropriate to your selections and to make the visits more tailored and pleasant.

None of these are used for this website.

General information on how you can disable cookies:

Current versions of web browsers offer enhanced user controls regarding the placement and duration of both first and third-party cookies. Search for "cookies" under your web browser's “Help menu” for more information on cookie management features available to you. You can enable or disable cookies by modifying the settings in your browser. You can also find out how to do this, and find more information on cookies at www.allaboutcookies.org. However, if you choose to disable cookies in your browser, you may be unable to correctly access certain parts of our website.

Who is responsible for your Personal Data?

The data controller for this website is:

adidas AG

Adi-Dassler-Straße 1

91074 Herzogenaurach

Germany

This privacy notice applies only to the Online Portal including to the Digital Toolbox/ telechargement d'image (DTB) (“this website”). It does not apply to the SAP systems to which you may have access and it does not apply if you contact customer service. These SAP systems such as the ordering system and the customer service are operated and legally controlled by the legal entity of the adidas Group which is responsible for your country.

Questions? Concerns? Complaints?

If you want to have your Personal Data deleted or corrected, please contact your local representative.

If you have any questions, concerns or complaints about how we process your Personal Data, please contact the Privacy Team.

Privacy Team Contact:

adidasPrivacy@adidas-group.com

If we cannot satisfactorily resolve any concerns or issues you have about how we process your Personal Data, you have the right to lodge a complaint with your local Data Protection Authority in any European Union Member State country, or with our local Data Protection Authority in Bavaria, Germany.

Bayerisches Landesamt für Datenschutzaufsicht (BayLDA)

https://www.lda.bayern.de/de/kontakt.html

Promenade 27

91522 Ansbach

Germany

TEL: +49 (0) 981 53 1300

email: poststelle@lda.bayern.de

Regularly reviewing this page ensures that you are always aware of what information we collect, how we use it and under what circumstances, if any, we will share it with other parties. If we change our privacy notice, we will update it on this page. Please check back frequently to be informed of any changes.

May 2018




Click here to Opt-Out from User Tracking