PRIVACY NOTICE | adidas

1. What does this Privacy Notice tell you?

2. Who is responsible for your Personal Data?

3. How do you exercise your rights for your Personal Data?

4. What Personal Data do we collect and use (“Categories of Personal Data”)?

5. What does adidas do with your Personal Data (Purposes and Processing)?

6. Recipients of your Personal Data

7. What does adidas do when we transfer your Personal Data outside of the UAE?

8. How do we secure your Personal Data?

9. General Questions, Support

10. Updates and Notification of Updates

1. WHAT DOES THIS PRIVACY NOTICE TELL YOU?

This Privacy Notice (“Notice”) provides necessary information required by the Lebanese laws (the “Law”) on how adidas (“adidas”, “we”, “us”) collects and uses information about you that is provided by you directly and indirectly or others. When the information allows us to identify you as an individual independent from others, it's called “personal data” under the LAW.

Additionally, you should also read any privacy notices displayed when you provide personal data to us as they provide details of the specific scenario which may not be covered by this Notice.

If you access any of our platforms by using a Virtual Private Network (also known as “VPN”) to interact with us – including making purchases – in a country that is not your current or residential country where LAW is the governing privacy law, please Read the privacy notice displayed at that specific platform or portal to understand how the responsible entities, our affiliated brands and adidas subsidiaries at that country use and protect your Personal Data as local national requirements may be different from the LAW.

We will routinely review the content of this Notice and make minor adjustments and corrections as necessary. As required by law, when we make any significant changes that would have an impact on your rights and your Personal Data, we will announce these changes in advance, and make sure you are informed of these changes, which may require us to send you an email announcement.

2. WHO IS RESPONSIBLE FOR YOUR PERSONAL DATA?

The following adidas [Data Controllers] jointly determine how your personal data is used by adidas for the purposes identified in the adidas Privacy Notice ("Joint Controllers"). They are responsible for protecting your Personal Data and complying with LAW.

DALFA SAL, a Company having its registered office at Azadea Building, United Nations Street, Jnah, Beirut, Lebanon (“Local Selling Entity”)

3. HOW DO YOU EXERCISE YOUR RIGHTS FOR YOUR PERSONAL DATA?

Kindly Contact us under FOLLOW US section via live chat or WhatsApp platform by clicking on this Share on WhatsApp if you wish to exercise your rights under the law

4. WHAT PERSONAL DATA DO WE COLLECT AND USE (“CATEGORIES OF PERSONAL DATA”)?

These are the categories of Personal Data we collect directly or indirectly from you:

IDENTITY INFORMATION - Any information that identifies you as an individual, living person. This includes name [first, last, initials], Date of Birth, e-mail address, phone number, unique consumer identifier number, nickname, password, social media identifiers and handles, your device fingerprint (including your browser fingerprint), gift card codes that are assigned to you. We use it to verify the identity.

CONTACT INFORMATION - Any information we can use to contact you. This may include: your phone number, shipping and billing address, e-mail address, Messenger ID, social media handle, any other communication channel you have used to contact us for more information. We use it to contact you for different reasons depending on the purposes stated below.

PAYMENT, PURCHASE AND TRANSACTION INFORMATION - Any information we use to complete or in relation to your purchase record and invoice. This may include: your payment information, payment risk profile (provided to us by our payment risk solution), shopping cart details (your ordered items), delivery details, shipping and Billing address, customer order number, purchase history with adidas, Transaction ID, and any other information related to your purchase. We use it to complete your order on adidas sites and apps, in adidas stores, or other selling platforms.

SIZE INFORMATION - Any information we can use to make sure your gear fits. This may include shoe size, clothes size, height, weight, chest, waist, hip, inseam, body shape, heel-toe measurement.

LOCATION INFORMATION - Any information we can use to know or guess where you are, real time or otherwise. This may include: your residential location, current log-in location [IP address], GPS location (if you wish to share us, for example through your mobile device settings), or the specific adidas site you have visited that might give us clues about where you are. We use it to help you find what you are looking for at your current location with us.

BEHAVIOURAL AND PREFERENCE INFORMATION - Any information which indicates your preference whether explicitly – if provided by you – or inferred. This may include: your shopping history (all items in shopping carts), Wishlist items, Your browsing behaviour, Your shopping preference, in-store digital interactions, Your workout history, Product reviews, Social media interactions with us, and any other intelligence we have about you to help us learn you as a consumer better, including "Community information". We use it to know you better as a consumer, so we can send you marketing messages containing only products and services that we think you might be interested in.

COMMUNITY INFORMATION - Any information that indicates your preferences. This may include information provided by you when you participate in various adidas community events either as a trainer, team member, a participant or as a promotor of our events, including for example: pictures, videos, your nickname, your team, your interests and preferences, your feedback, leader boards, event participation, joined groups, and registration details. We use this information to organize the events and communities, and to know more about you as a consumer.

BROWSING INFORMATION - Any information on. your browsing behaviour. This may include: browser name, IP address (including hashed IP address), clickstream data, data and time of site visits, time remained on site, pages visited, and the links you have clicked in our marketing messages or website, the referral URL that brought you to our site.

MOBILE DEVICE INFORMATION - Any information related to your mobile device. This may include information about your device or browser that gives us an idea about your browsing behaviour or device usage. Your device information is collected by our app, and your browser information is collected b; IP address, date and time of the visit, how long you remained on our website, the referral URL (if you came to our site via a different site or an advertisement), the pages visited on our site, tour browser type, device type, versions, and operating system.

SOCIAL MEDIA INTERACTION AND ACTIVITY  - Any information about you we obtain through different social media channels such as Facebook, Instagram, Google, etc., when we use these channels for advertising, analytics purposes or to enrich your profile with adidas. This may include: any social media information that is publicly available such as your social media handles, social media interactions and public postings, your “Likes” and other reactions, your social media connections, your photos that are public, or those you send to us by mentioning us or following our social media posts by using “handles” or “hashtags”, comments or messages you shared with us publicly or privately on social media platforms. Also, we may be able to obtain information indirectly from social media companies (Facebook, Google, etc.) when we advertise on these platforms,

IMAGE AND RECORDING  - Any image, voice or video recordings we have captured or obtained where you may be identified. This may include: CCTV footages, photos taken in our retail stores and/or at events, video recordings made during events or specific interactions, voice recording made during events or interactions (excluding correspondence with Customer Service), any images you share with us through social media.

FITNESS ACTIVITY INFORMATION - Any information connected to your fitness activity which you track using our Platforms (including adidas Running and Training). This may include fitness data (for example workout start and end times, activity type, sports category), sensors data (for example step goal, duration, pace, distance, calories, heartbeat, run score, and speed), and other data related to your fitness app. We use it to help you improve your performance goals and improve your user experiences and identify what products might be best for you based on your exercise patterns.

HEALTH INFORMATION - Any information that relates to your health or vitals such as your body mass index (BMI), heartbeat per minute, or information of any disability. This is used only when you have allowed us to use it – with your consent - for specific reasons and purposes.

PERSONAL OPINION - Any opinion you share with us that indicate your point of view and comments. This may include when you provide us feedback and review rating our service or products, or if you participate in any product research and development discussions.

SENSITIVE PERSONAL OPINION - Any opinion you share that may indicate or reveal certain characteristics about you including your political view, your sexual orientation, information about race and ethnicity, religious or philosophical beliefs, trade union or health. This is used only when you have allowed us to use it – with your consent - for specific reasons and purposes.

5. WHAT DOES ADIDAS DO WITH YOUR PERSONAL DATA AAND WHY (PURPOSES AND PROCESSING)?

In this section we explain:

A. When and Why do we need your personal data (“Purpose”)?

B. What allows us to use your personal data for each purpose (" Legal Basis ")?

C. What do we do to your personal data for each purpose (" Processing ")?

D. Which of your personal data do we need for each purpose (" Categories of Personal Data ")?

E. How do we keep your personal data for each purpose (" Retention Period ")?

F. With whom (types of service providers) do we share your personal data to achieve the purpose (" Categories of recipients ")?

G. Site (adidas Domain) Operation and App Operation?

Processing

To run the sites that are connected to the adidas domain and the adidas app, fix bugs to make sure you always see the site the way we intended, and monitor compliance with our terms and conditions, we screen all traffic to our site and analyse data that is received by our servers.

Use of Cookies/Tags/Pixels: We may collect your personal details for this purpose by using technologies such as cookies, pixels and tags to collect your device information. More information is available in “COLLECTING YOUR DEVICE INFORMATION ON OUR WEBSITE USING COOKIES, PIXELS, TAGS, AND SIMILAR TECHNOLOGIES”.

Legal Basis

Legitimate Interest

Categories of personal data

Device Information

Identity Information

Behavioural and Profile Information

Preference Information

Retention Period

Browsing Session

We need your data for as long as you are on the site. We keep it for the duration of your browsing session.

Categories Of Recipients

adidas Data Controllers

adidas AG Subsidiaries and Affiliates

Site Administration Support Providers

A. Domain and Network Security and User Authentication

PROCESSING

To protect our domains, detect unusual activities, prevent security threats and protect our site-visitors from unauthorized accesses (such as hackers), we screen all traffic to our sites, and authenticate user log-in information using tokens to verify the details you provide to us and compare it with other available information, such as the credentials you have provided directly to adidas or other platforms (such as Runtastic or Facebook) or information that is available in the public domain to ensure only “authorised” users have access to our sites.

We also use on our website and app the reCaptcha software, which is provided by Google. reCAPTCHA works by collecting hardware and software information, such as device and application data, and sending this data to Google for analysis.

When you use reCaptcha, y our use of reCAPTCHA is subject to the Google Privacy Policy and Terms of Use.

Use of Cookies/Tags/Pixels: We may collect your personal details for this purpose by using technologies such as cookies, pixels and tags to collect your device information. More information is available in “COLLECTING YOUR DEVICE INFORMATION ON OUR WEBSITE USING COOKIES, PIXELS, TAGS, AND SIMILAR TECHNOLOGIES ”.

LEGAL BASIS

Legitimate Interest

CATEGORIES OF PERSONAL DATA

Device information

Identity information

Behavioural and Profile information

Preference information

RETENTION PERIOD

Browsing Session

We need your data for as long as you are on the site. We keep it for the duration of your browsing session.

CATEGORIES OF RECIPIENTS

adidas Data Controllers

adidas AG Subsidiaries and Affiliates

Site Administration Support Providers

B. Global Credential to All adidas Platforms - User Experience

PROCESSING

We know you don't like to remember usernames and passwords or having to register multiple times.

To enable our users to log on to all platforms, portals, services, communities and apps operated by or on behalf of adidas Data Controllers (which includes the Runtastic app and services) (“adidas Platforms”) with one set of log-in credentials (“adidas Log-In”), we store your adidas Log-In in our global authentication platform. When you use your adidas Log-In to enter any adidas Platform, we will use a token to verify your identity from our global authentication platform. This also further ensures our network and domain security.

Use of Cookies/Tags/Pixels: We may collect your personal details for this purpose by using technologies such as cookies, pixels and tags to collect your device information. More information is available in “COLLECTING YOUR DEVICE INFORMATION ON OUR WEBSITE USING COOKIES, PIXELS, TAGS, AND SIMILAR TECHNOLOGIES”.

LEGAL BASIS

Legitimate Interest

CATEGORIES OF PERSONAL DATA

Identity information

Preference information

RETENTION PERIOD

Your account duration or inactivity 25 months

To allow you to sign in with your adidas Log-In on adidas Platforms, we need to maintain your data for as long as you have an account with us, or if you stop using our services without requesting to delete your data, we will keep it for 25 months after your last log in.

CATEGORIES OF RECIPIENTS

adidas Data Controllers

adidas AG Subsidiaries and Affiliates

Site Administration Support Providers

C. Sales of adidas Products - Online and Off-Line Order

PROCESSING

To process your online and/or in-app orders, make sure your payment is received, comply with the requirements under our Terms and Conditions (Purchase Terms) (for selling you the products) including invoice processing, delivery, personalization services, exchanges and refunds. Your order cannot be completed if our payment fraud detection solutions flag your transaction as suspicious and potentially fraudulent. Please note the payment fraud detection system is an automated decision-making process. It is required to allow us to conclude the contract with you. You have the right to request a human review of this decision, and challenge the decision.

LEGAL BASIS

Performance of Contract

Legitimate Interest

Legal Obligation

CATEGORIES OF PERSONAL DATA

Identity information

Contact information

Location information

Size information

Purchase information

Correspondence

Device information

RETENTION PERIOD

Duration of contract and statutory limitation period (10 years).

We need to keep the information in case of any legal disputes concerning the contract.

CATEGORIES OF RECIPIENTS

adidas Data Controllers

adidas AG Subsidiaries and Affiliates

Selling Partners (where applicable)

Manufacturing Providers

Delivery Service Providers

Payment Risk Solution Providers

Payment Processing Providers

IT Cloud Solution Providers

D. Payment Fraud Detection

PROCESSING

We combine the purchase information you provide to us with other information we obtain through our third-party payment risk and fraud prevention service providers to ensure any purchases are legitimate, or you do not purchase our products in violation with our terms and conditions. This means depending on the outcome of the analysis of your information, we may reject your order, and decline your payment. This is an automated decision-making process that is required to conclude our sales contract with you.

LEGAL BASIS

Performance of Contract

CATEGORIES OF PERSONAL DATA

Identity information

Contact information

Behavioural and Profile information

Purchase information

Device information

RETENTION PERIOD

Duration of contract and statutory limitation period. We need to keep the information in case of any legal disputes concerning the contract.

CATEGORIES OF RECIPIENTS

adidas Data Controllers

adidas AG Subsidiaries and Affiliates

Payment Risk Solution Providers

Payment Processing Providers

IT Cloud Solution Providers

E. Product Delivery

PROCESSING

Once you have successfully placed an order, we use your contact details (home and/or shipping address) and other purchase information to deliver the products you purchased to you.

LEGAL BASIS

Performance of Contract

CATEGORIES OF PERSONAL DATA

Identity information: Name

Contact information: Shipping Address

RETENTION PERIOD

Duration of contract and statutory limitation period. We need to keep the information in case of any legal disputes concerning the contract.

CATEGORIES OF RECIPIENTS

adidas Data Controllers

adidas AG Subsidiaries and Affiliates

Service Providers

IT Cloud Solution Providers

F. Electronic Delivery Tracking

PROCESSING

This is a service provided on request of the consumer by our Delivery Partners.

You have the option to track your delivery using services provided directly by our delivery partners; However, we will only be able to share your information with our delivery partners for this purpose with your consent. The service is hosted on the Delivery Partner's platform. You should read their Privacy Notice for the processing of your Personal Data for this purpose.

LEGAL BASIS

Consent

CATEGORIES OF PERSONAL DATA

Identity information

Contact information

Any other information you may directly and voluntarily provide to the Delivery Partner

RETENTION PERIOD

As determined by our Delivery Partner.

CATEGORIES OF RECIPIENTS

Delivery Service Providers

G. Business Operational Analytics

PROCESSING

We need to know how we do as a business. This is in the interest of our shareholders, our board members, our employees, and our partners. For this purpose, we need to analyse different categories of information to understand how our products are selling in different markets, what are the popular features of our products, what worked and what didn't in terms of our marketing and advertising campaigns, our product designs and distribution strategy, our website design and overall user experience, so we can establish, implement, and evaluate our business strategy. This includes analysing data to understand how users browse our site and use the app to improve our user experience design to make sure you will continue to purchase our products and interact with us on our sites and applications.

To minimise the risk to you as an individual, we will only use either the unique consumer identifier or the IP address for this purpose.

You can learn more about how our Data Analytics Solution Providers provide analytics services by using your data here:

Adobe Analytics Data Collection:

https://marketing.adobe.com/resources/help/en_US/reference/c_Privacy_Overview.html

Google Analytics Data Collection:

Use of Cookies/Tags/Pixels: We may collect your personal details for this purpose by using technologies such as cookies, pixels and tags to collect your device information. More information is available in “ COLLECTING YOUR DEVICE INFORMATION ON OUR WEBSITE USING COOKIES, PIXELS, TAGS, AND SIMILAR TECHNOLOGIES ”.

LEGAL BASIS

Legitimate Interest

CATEGORIES OF PERSONAL DATA

Identity information: Unique Consumer Identifier (only)

Size information

Purchase information

Behavioural and Profile information

Community information

Activity information

Device information

Correspondence

RETENTION PERIOD

When using analytics services provided by the vendors identified above, we are required to retain data for the period specified by these vendors. You can find the retention period indicated by the vendors here: Adobe Analytics: 36 months (https://marketing.adobe.com/resources/help/en_US/reference/data-retention. html )

Google Analytics: 38 months (https://support.google.com/analytics/answer/7667196?hl=en)

We need the information for this duration to produce accurate analysis of our business operations.

CATEGORIES OF RECIPIENTS

adidas Data Controllers

adidas AG Subsidiaries and Affiliates

Prospective Buyers and Investors

Business Consulting Service Providers

Data Analytics Solution Providers

IT Cloud Solution Providers

H. Customer Service

PROCESSING

We collect your Personal Data to tell you when the product you like is available upon your request and respond to your questions and concerns through various communications channels we make available to you. Your requests to our customer service will be analysed so that we can provide you with valuable service in the future.

LEGAL BASIS

Legitimate Interest

CATEGORIES OF PERSONAL DATA

Identity information

Contact information

Location information

Size information

Purchase information

Correspondence

RETENTION PERIOD

Statutory limitation period. We need to keep the information in case of any legal disputes.

CATEGORIES OF RECIPIENTS

Customer Service Provider

adidas Data Controllers

adidas AG Subsidiaries and Affiliates

Selling Partners (where applicable)

Delivery Service Providers

Payment Risk Solution Providers

Payment Processing Providers

IT Cloud Solution Providers

I. Personalized Marketing Messages Via Email (Newsletter Sign-Up)

PROCESSING

We send you marketing messages that we think you would be interested (“personalised”) to the email address you provide to us or via push-notifications when you have installed our app. To send you “personalised” messages, we observe your online (and sometimes, where applicable, offline) behaviour, and analyse your behaviour using analytics to best estimate what product lines you might be interested in, and you can benefit from. This requires us to collect various categories of Personal Data from you. We use different analytics tools to understand what your behavior means in terms of your like and dislike of our various product lines, and to understand the impact (success rates) of the messages delivered to you.

Use of Cookies/Tags/Pixels: We may collect your personal details for this purpose by using technologies such as cookies, pixels and tags to collect your device information. More information is available in “ COLLECTING YOUR DEVICE INFORMATION ON OUR WEBSITE USING COOKIES, PIXELS, TAGS, AND SIMILAR TECHNOLOGIES ”.

LEGAL BASIS

Consent

CATEGORIES OF PERSONAL DATA

Identity information

Contact information (if available to adidas)

Location information

Size information (if available to adidas)

Purchase information (if available to adidas)

Behavioural and Profile information (if available to adidas)

Community information (if available to adidas)

Social Media information (if available to adidas)

Activity information (if available to adidas)

Device information

Preference information (if available to adidas)

RETENTION PERIOD

We retain it for as long as you do not withdraw your consent sending you emails or object to us processing your Personal Data for marketing purposes.

CATEGORIES OF RECIPIENTS

adidas Data Controllers

adidas AG Subsidiaries and Affiliates

Email Marketing Support Providers

IT Cloud Solution Providers

J. Personalized Marketing Messages Via Email (Via Existing Contract)

PROCESSING

We send you marketing messages that we think you would be interested in (“personalised”) to the email address you provide to us during a purchasing contract, or via push-notifications when you have installed our app. To send you “personalised” messages, we observe your online (and sometimes, where applicable, offline) behaviour, and analyse your behavior using analytics to best estimate what product lines you might be interested in, and you can benefit from. This requires us to collect various categories of Personal Data from you. We use different analytics tools to understand what your behavior means in terms of your like and dislike of our various product lines, and to understand the impact (success rates) of the messages delivered to you.

Use of Cookies/Tags/Pixels: We may collect your personal details for this purpose by using technologies such as cookies, pixels and tags to collect your device information. More information is available in “ COLLECTING YOUR DEVICE INFORMATION ON OUR WEBSITE USING COOKIES, PIXELS, TAGS, AND SIMILAR TECHNOLOGIES ”.

LEGAL BASIS

Legitimate Interest

CATEGORIES OF PERSONAL DATA

Identity information

Contact information (if available to adidas)

Location information

Size information (if available to adidas)

Purchase information (if available to adidas)

Behavioural and Profile information (if available to adidas)

Community information (if available to adidas)

Social Media information (if available to adidas)

Activity information (if available to adidas)

Device information

Preference information (if available to adidas)

RETENTION PERIOD

We retain it for as long as you do not withdraw your consent sending you emails or object to us processing your Personal Data for marketing purposes.

CATEGORIES OF RECIPIENTS

adidas Data Controllers

adidas AG Subsidiaries and Affiliates

Email Marketing Support Providers

IT Cloud Solution Providers

K. Targeted Messages On 3rd-Party Advertising Platforms

PROCESSING

We use third-party advertising platforms, such as Facebook, Google, YouTube, Instagram, etc. to send you messages that are targeted at you, based on your behavior and browsing pattern, at specific times and locations of these platforms to increase the efficiency of our advertising campaigns. We use third-party solutions such as Google Analytics and Facebook Business Manager tools to help us do a better job at targeting our campaigns and messages for our consumers. Your Personal Data is shared with the third-party advertising platforms, and they will attempt to match your profile in their database to determine the optimal time and place (the page you are browsing) to show you an advertisement from adidas. We also need to analyse necessary information to understand the impact of our campaigns. If you don't accept that we track you for this purpose, you will still see adidas advertisements on other platforms at random.

You can learn more about how our Advertising Partners help us achieve this purpose by visiting their sites:

Google Personalized Advertising: https://support.google.com/adspolicy/answer/143465?hl=en

Google Advertising Policies: https:// support.google.com/adspolicy/answer/6020956

Facebook Lookalike Audiences: https://www.facebook.com/business/help/164749007013531

Facebook Custom Audience Terms: https://www.facebook.com/legal/terms/customaudience

Use of Cookies/Tags/Pixels: We may collect your personal details for this purpose by using technologies such as cookies, pixels and tags to collect your device information. More information is available in “ COLLECTING YOUR DEVICE INFORMATION ON OUR WEBSITE USING COOKIES, PIXELS, TAGS, AND SIMILAR TECHNOLOGIES ”.

LEGAL BASIS

Consent

CATEGORIES OF PERSONAL DATA

Identity information

Contact information (if available to adidas)

Location information

Size information (if available to adidas)

Purchase information (if available to adidas)

Behavioural and Profile information (if available to adidas)

Community information (if available to adidas)

Social Media information (if available to adidas)

Activity information (if available to adidas)

Device information

Preference information (if available to adidas)

RETENTION PERIOD

We retain it for as long as you do not withdraw your consent.

CATEGORIES OF RECIPIENTS

adidas Data Controllers

adidas AG Subsidiaries and Affiliates

Advertising Agency Partners

Social Media Platforms

Targeted Marketing Service Providers

IT Cloud Solution Providers

L. Private Event Registration

PROCESSING

When you sign up for an event we organize that have limited spots, we use the Personal Data you provide to reserve a spot for you. Your Personal Data will be used according to the Terms and Conditions associated with the event.

LEGAL BASIS

Performance of Contract

CATEGORIES OF PERSONAL DATA

Identity information

Contact information

Location information

Activity information: any information we may collect from you on the day of the event.

RETENTION PERIOD

Duration of the event and statutory limitation period in case of any disputes.

CATEGORIES OF RECIPIENTS

adidas Controller organizing the event.

adidas Data Controllers

adidas AG Subsidiaries and Affiliates

Event Partners (where applicable)

IT Registration Cloud Solution Providers (where applicable)

M. Open Event Registration

PROCESSING

We often also organize events that are open to everyone. We use the Personal Data you provide to keep you inform of the events you are interested in.

LEGAL BASIS

Legitimate Interest

CATEGORIES OF PERSONAL DATA

Identity information

Contact information

Location information

Activity information: any information we may collect from you on the day of the event.

RETENTION PERIOD

For the duration of the event + 36 months if the data from a particular event is used for BUSINESS OPERATIONAL ANALYTICS purpose.

CATEGORIES OF RECIPIENTS

adidas Controller organizing the event.

adidas Data Controllers adidas AG Subsidiaries and Affiliates

Event Partners (where applicable)

IT Cloud Solution Providers (where applicable)

N. Product Research and Development

PROCESSING

We conduct analysis to research improving our products and services. This includes asking you questions in surveys, asking you for feedback, asking you to test our products and provide us with a review, asking other service providers to conduct market and product research for us, try new technologies in our product that might collect Personal Data to stay ahead of the competition. We retain this information based on our “legitimate interest”, so by participating in any product review or survey, you agree that this is our legitimate interest. Where you wish to object to this legitimate interest, we will anonymize your information, so it is no longer Personal Data.

LEGAL BASIS

Legitimate Interest

CATEGORIES OF PERSONAL DATA

Identity information (only if required by the project)

Contact information (only if required by the project)

Location information (only if required by the project)

Size information

Purchase information (only if required by the project)

Behavioural and Profile information (only if required by the project)

Community information: this is the response you provided whichever format agreed at the time of the project.

Social Media information (only if required by the project)

Activity information (only if required by the project)

Device information (only if required by the project)

Correspondence (only if required by the project)

Preference information

Health information: if a project requires you to also provide health information, we will explicitly ask for your consent.

RETENTION PERIOD

The duration of the project and statutory retention period stated to protect our IP rights.

CATEGORIES OF RECIPIENTS

adidas Data Controllers

adidas AG Subsidiaries and Affiliates

Prospective Buyers and Investors

Business Consulting Service Providers

Data Analytics Solution Providers

Manufacturing Providers

IT Cloud Solution Providers

O. Legal Obligation - Cooperation with Law Enforcement and Regulatory Authorities (Including Courts)

PROCESSING

When we are legal required to provide your personal data for national and public security reasons, crime prevention, investigation and prosecution, anti-money laundering, judicial proceedings, protection of other individuals rights and freedoms, and of civil claims, we will provide information as Requested by the authorities or parties once we are satisfied that the request is mandated by law. We may not be able to notify you if it is against the law to do so.

LEGAL BASIS

Legal Obligation

CATEGORIES OF PERSONAL DATA

All Categories of Personal Data as requested by the enforcement authority.

RETENTION PERIOD

For as long as required by law.

CATEGORIES OF RECIPIENTS

adidas Data Controllers

adidas AG Subsidiaries and Affiliates

Local and national government authorities, including tax authorities

Local and national law enforcement agencies

Local and national Judiciary

P. Collecting Your Device Information on Our Website Using Cookies, Pixels, Tags, And Similar Technologies (“Cookies Notice”)

PROCESSING

When you visit the adidas site, we store data collectors such as cookies, tags, pixels, tag containers, beacons, among others, in your browser to obtain certain information about your current browsing session. These technologies are often referred to as “ cookies ” collectively by other websites. Cookies also enable our website to remember your actions and preferences (such as login, language, font size and other display preferences) over a period, so you don't have to keep re-entering them whenever you come back to the site or browse from one page to another. We use Cookies for different purposes, which also mean they have different legal bases. Please review the information below to understand how we use different types of cookies to fulfil different purposes.

1. “REQUIRED ” - site functionality and business operation. We use “Required Cookies” to operate our site. This includes storing a unique identifier to manage and identify you as a unique visitor to our site, to provide a consistent and accurate service to you. This includes making sure that we remember the products you have placed in your cart, or your language preferences. These Cookies are stored for the duration of your browsing session. Without these Cookies, you will not be able to view our site properly.

LEGAL BASIS

Legitimate Interest

2 “FUNCTIONAL ” – website improvement and performance. We use “Functional Cookies” to continuously improve our website performance. This includes using the data we collected from you to do the following:

Web analytics —Based on your browsing behaviour, we will analyzeanalyse the data to improve the functionality and design of our site.

Ad response rates — Based on how you come to our site, We will measure our ad response rates by analysing our ad click-through rates to improve the effectiveness of advertising purchased on a site external to ours.

Affiliate tracking — We need to let our affiliate marketing partners, or service providers have certain information if you came to our site, and purchased products, through a visit to theirs. This is required as we may need to provide them a fee for such services. For this purpose, we will share information about your visit, including the products you have purchased.

Error management — We measure errors presented on a website, to make sure we fix bugs or any issues promptly.

Testing designs — We need to use A/B testing or multivariate testing, to ensure a consistent look and feel is maintained for the user of the site in the current and subsequent sessions.

LEGAL BASIS

Legitimate Interest

3 “MARKETING ” – website improvement and performance. We use “Marketing Cookies” provided by our advertising partners to make sure our advertising messages are shown to you at the right time and the right place. These cookies are persistent but time-limited cookies. These Cookies contain a unique key to distinguish individual users' browsing habits. We also use these Cookies to limit the number of times a user sees a particular ad on a website and to measure the effectiveness of a particular campaign. The identifier stored by these Cookies are provided by our partners. We cannot use the same identifier in our own systems. We also use these cookies to serve ads that are relevant to your immediate geo-location, for example to provide you with the nearest store where the product you are browsing may be available.

LEGAL BASIS

Consent

CATEGORIES OF PERSONAL DATA

Device information

Location information

Behavioural and Profile information: this is collected through observing your browsing behavior

Preference information (if available to adidas)

RETENTION PERIOD

The cookies, pixels, tags, and other similar technologies used to collect your device information and browsing behavior information are stored in your browser for the session or for as long as you do not clear your browser cookie setting.

The data we obtained through the cookies related to other purposes will be stored for the duration of that purpose.

CATEGORIES OF RECIPIENTS

adidas Data Controllers

adidas AG Subsidiaries and Affiliates

Site Administration Support Providers

Business Consulting Service Providers

Data Analytics Solution Providers

Advertising Agency Partners

Social Media Platforms

Targeted Marketing Service Providers

You can change your browser settings to delete or prevent certain cookies from being stored on your computer or mobile device without your explicit consent. The 'help' section in your browser should provide information on how to manage your cookie settings.

Find out how this works for your browser here:

Internet Explorer: https://support.microsoft.com/help/17442/windows-internet-explorer-delete-manage-cookies

Mozilla Firefox: http://support.mozilla.com/en-US/kb/Cookies

Google Chrome: http://www.google.com/support/chrome/bin/answer.py?hl=en&answer=95647

Safari: http://support.apple.com/kb/PH5042

Opera: http://www.opera.com/browser/tutorials/security/privacy/

Adobe (flash cookies): http://www.adobe.com/privacy/policies/flash-player.html

Google Chrome App: https://support.google.com/accounts/answer/61416?co=GENIE.Platform%3DAndroid&hl=en

These websites will also help you understand more about how to cook -based advertising works and how you can manage your Cookie Settings:

http://www.aboutads.info/choices http://www.youronlinechoices.eu/ Network Advertising Initiative opt-out page: http://optout.networkadvertising. org/?c=1

You can learn more about the laws governing the use of “Cookies” here: http://ec.europa.eu/ipg/basics/legal/cookies/index_en.htm

Q. User-Generated Content (UGC) Acquisition From Social Media

PROCESSING

We invite you to provide your images to us via social media platforms by following specific instructions such as "#yesadidas". We will be using the images you provide for our campaign communications. We will obtain rights to your image through a license agreement in the form of our terms and conditions. By submitting your images via social media platforms to us, you will agree for us to use your images as described in the license agreement.

LEGAL BASIS

Performance of Contract

CATEGORIES OF PERSONAL DATA

Identity information: your social media handler

Community information: images, videos, comments, sound recordings and other files provided through the social media platform promoting adidas

Social Media information

RETENTION PERIOD

Duration of license agreement and statutory limitation period in case of any disputes.

CATEGORIES OF RECIPIENTS

adidas Data Controllers

adidas AG Subsidiaries and Affiliates

Event Partners (where applicable)

UGC Support Partners

Advertising Agency Partners

Social Media Platforms

IT Cloud Solution Providers (where applicable)

R. Push Notifications (In-App Communication)

PROCESSING

When you use the adidas app, we use push notifications in this app to communicate with you concerning the purposes stated in this Notice. This includes information that relates to purposes based on the Performance of Contract (such as your purchase). You can switch off push notifications at any time using “Settings” in your mobile devices. However, if you switch off push notifications, we may need to contact you via emails for important messages relating to your purchase.

LEGAL BASIS

Legitimate Interest

CATEGORIES OF PERSONAL DATA

Device information

RETENTION PERIOD

For as long as you use the app and not switched Push Notification off.

CATEGORIES OF RECIPIENTS

adidas Data Controllers

adidas AG Subsidiaries and Affiliates

S. Size recommendation tools

PROCESSING

To help you choosing the right product's size before the purchase, we provide size recommendation widgets on our app and website. The widget will recommend you the appropriate size for a certain adidas product, by using machine-learning algorithms.

The widget will combine info collected from you (Size information) with your adidas Purchase information to recommend you the most appropriate size for a certain adidas product.

The size recommendations are provided by a third-party provider.

LEGAL BASIS

Legitimate Interest

CATEGORIES OF PERSONAL DATA

Size information

Purchase information

RETENTION PERIOD

Duration of contract and statutory limitation period

CATEGORIES OF RECIPIENTS

Your Personal Data is used for the following purposes:

a) "COOKIES" NOTICE: Installing Cookies, Pixels, Tags, and other Technologies on Your Browser to Collect Your Device Information and Track Your Activities on Ours and Other Platforms;

b) Operate adidas Online Shop and adidas Platforms;

c) Display Targeted Advertisements and Send Individualized Marketing Messages;

d) Administer adidas Membership Programs and Organization Events and Activities;

e) Improve and Develop adidas Brand Products and Services; and

f) Comply with Legal Obligations.

In order to carry out these purposes, we may be sharing your data with other adidas companies, including adidas AG (Adi-Dassler Str. 1, 91074 Herzegenaurach, Germany), adidas International Trading AG (Platz 1b, 6039 Root D4, Switzerland) , adidas International Marketing BV (Hoogoorddreef 9a, 1101 BA Amsterdam, The Netherlands) and runtastic GmbH (Pluskaufstraße 7, 4061 Pasching, Austria).

Your Personal Data may be kept for up to 24 months after inactivity, except for the data is required to be deleted earlier or kept longer for legal reasons specified by law.

6. Recipients Of Your Personal Data

We may share your Personal Data with certain Data Processors who will be bound with data protection requirements as per the Law or as per their local data protection legislation.

7. WHAT DOES ADIDAS DO WHEN WE TRANSFER YOUR PERSONAL DATA OUTSIDE OF LEBANON

Depending on the Personal Data processing activity, your Personal Data is shared with different other adidas entities, and third parties located in a different country. We comply with all local legal requirements to ensure your Personal Data is secured and safe when it is being transferred to a different country (including access).

8. HOW DO WE SECURE YOUR PERSONAL DATA?

We implement appropriate technical and organizational measures to address the risks corresponding to our use of your Personal Data, including loss, alteration, or unauthorized access to your Personal Data, and empowering you to exercise your rights. We require our service providers to do the same through contractual agreements. However, you should be aware that any transmission of your Personal Data through the internet is at your own risk. We can only protect your Personal Data when we have it.

9. GENERAL QUESTIONS, SUPPORT

If you have any general questions or require immediate assistance and support concerning your rights or how we use your Personal Data, You can contact us via our support channels such as WhatsApp Share on WhatsApp or live chat.

DALFA SAL, a Company having its registered office at Azadea Building, United Nations Street, Jnah, Beirut, Lebanon (“adidas”)

10. UPDATES AND NOTIFICATION OF UPDATES

We review and update the Privacy Notice periodically to reflect any changes resulting from our day-to-day business operations. You can always check the date of the Privacy Notice to find out when we last made any changes. We will notify you when we make significant changes that you must be aware of.